IT SECURITY MANAGER!

Do you have experience in succesfully implementing and maintaining security management systems according to the ISO27001 standards?

Do you have a passion for, and a great deal of knowledge in IT security, along with the ability to communicate the topic effectively?

Do you want to be part of ensuring secure systems for a company in growth and with high ambitions - both inside and outside the Nordics?

Join our journey in changing the retail agency world to become more data driven. We are currently hiring an IT Security Manager to work with our European IT Security Manager to develop our IT security controls and processes, and to protect systems from cybersecurity risks, threats, and vulnerabilities.

Your key responsibilities will be to implement and maintain information security management system, according to the ISO27001 security standards, and building a comprehensive set of cutting-edge security processes. You will be providing IT security support, including technical incident response and security operations support, and help supply IT security training and awareness throughout the organization. You will be the central person in WorkShop when it comes to IT security and will have support from resources in our parent group, Advantage Smollan.

You will be continuously reviewing our IT security approach in relation to wider industry standards, laws, and regulations. This also includes reviewing new and current client contracts from an IT security perspective and conduct 3rd party security assessments for new products and solutions.

You will proactively monitor and maintain the Network Security Infrastructure, undertake vulnerability scans, and work with stakeholders throughout the organization to ensure compliance and implementation of security-by-design and privacy-by-design in information systems, and ensure alignment between information security and data privacy practices.

We expect you to have at least

- Proven experience in an information security management position with demonstrable evidence on technical incident response, security assessment, stakeholder management, continuous vulnerability management and partnering with internal data privacy teams.
- Knowledge of best practices in modern security architectures, including Cloud and hybrid architecture
- Experience in implementing and maintaining security standard ISO27001
- Awareness of security frameworks and industry standards - Cyber Essentials, IASME, PCI-DSS, ISO 27001, NIST, OWASP
- Awareness of common exploits and vulnerabilities
- Solid network engineering and server architecture awareness
- Strong team player and influence skills
- Commercial awareness and solution orientation
- Excellent technical, communication and interpersonal skills especially when dealing with client contacts and senior management


It will be to your advantage if you also

- Have strong project management skills
- Possess one of the following certifications: SANS GIAC, CCSA, CCSE, CISSP, CISM, CISA
- Graduated or have education in, a technical/Engineering subject
- Have previous experience in working in a multi-national environment would be a distinct advantage
- Have previous experience in retail, field marketing or advertising


Placement: HQ Stockholm, NextGenRetailHub (https://www.nextgenretailhub.com/), Hybrid

Start: As soon as possible or according to agreement

Working hours: Full time (37,5 h/w)

WorkShop offers you an exciting job in an international and dynamic organization where there is a short time gap from idea to action. Would you like to join us?

Selection and interview process is ongoing; therefore, please apply as soon as possible. We don't accept applications by mail, apply therefore via add.

Last application day is 2022-10-16.


Learn more about our company at WorkShop (https://www.work-shop.com/) and follow us on Facebook (https://www.facebook.com/workshoptheconsumerexperienceagency), LinkedIn (https://www.linkedin.com/company/724670/admin/) and Instagram (https://www.instagram.com/workshopretail/)!