Information Security Specialist

Epiroc is a leading productivity partner for the mining, infrastructure and natural resources industries. With
cutting-edge technology, Epiroc develops and produces innovative drill rigs, rock excavation and construction
equipment, and provides world-class service and consumables. The company was founded in Stockholm,
Sweden, and has passionate people supporting and collaborating with customers in more than 150 countries.
Learn more at www.epirocgroup.com.

Your mission
The mission for the role as an Information Security Specialist is to understand the threat landscape, improve the effectiveness of Epiroc's Cyber Security Program and protect business assets. We help the business to identify Information Security risks and required mitigating activities.
You will be responsible for the Security Awareness Training area and develop and deliver training on our new security awareness platform. 
 As our Information Security Specialist, you will:
 •   Take the lead in developing and delivering Security Awareness Training
•   Participate in risk assessments to reduce risk and security exposure for Epiroc
•    Participate in the planning of information security risk assessments to examine and verify security capabilities and controls related to Epiroc’s information assets
•    Communicate risk assessment findings and provide risk remediation guidance to key stakeholders
•    Identify opportunities to improve risk posture and give advice for risk mitigation 
•    Develop and maintain risk management standards, processes and templates
•    Participate in developing the Information Security Management System (ISMS)
•    Participate in developing and delivering Supply Chain security assessments
•    Manage information security projects
•    Assist in M&A Activities to evaluate information security requirements
•    Participate in improving Information Ownership & Classification 
•    Assist in developing intellectual property Asset Management 
•    Supporting the business in creating Business Impact Analyses
•    Participate in improving our Threat Intelligence and in monitoring & reporting information security KPIs

Your profile
For this role we would like to see that you have a Bachelor's Degree in Business Information Systems, Cybersecurity, Computer Science, or a related field. Or if you have equivalent work experience.

You have at least 3-5 years of experience in the field.

High level of both verbal and written English. Additional languages are a plus.
Knowledge of regulatory compliance, including information security management frameworks (e.g., ISF Standard of Good Practice, NIST CSF, ISO2700x, SANS Top 20 Critical Security Controls, SOX, COBIT), is preferred. 
Security certifications such as CISSP, CISA or CISM is a plus.
Great communication and presentation skills. You have the ability to translate technical language into business terms, work independently, establish plans, report status and deliver according to plan. .


Location and travel
Location is depending on the candidate, preferably Stockholm, Sweden. Global travel may occur.
In case a candidate from a different country applies and is successful, Swedish local terms and conditions will apply.

Application and contact information
Please send your application, including CV and personal letter, by creating an account in our recruitment system as soon as possible but no later than 15th of June. 
We review applications on a rolling basis. Please note that, due to the current regulations, we will only consider applications received through our system and not via email or social media.
For questions about the position please contact hiring manager Urmas Aamisepp, Head of Information Security on urmas.aamisepp@epiroc.com.
For questions about the recruitment process or application please contact: Recruitment specialist Dana Galova dana.galova@epiroc.com.
Life at Epiroc
By joining our team, you can expect an atmosphere of creativity, innovation, and workplace diversity. You will be a part of a group of skilled and helpful colleagues who live by our core values: Collaboration, Commitment, and Innovation. We work in a global environment with over 113 different nationalities!

In addition to the fact that we have a culture that is characterized by development combined with having a good balance between work and leisure, there are some things that makes us a little extra proud to work at Epiroc:  
•    Global career opportunities
•    Epiroc University, for your own competence development
•    Community involvement
•    Benefits package, which amongst other things include flexible working hours and bonus.

A hybrid workplace 
Life at Epiroc can include the possibility for a hybrid workplace. It is a way of working that offers flexibility and participation allowing for a better balance between work and private life, which also promotes well-being. The hybrid workplace is an opportunity if work allows, based on your role, responsibilities, and individual conditions.