IT Security Officer (f/m/d)

We are looking for an
IT Security Officer (f/m/d)
with a focus on Network Services in one of our offices: Berlin (preferred), Gliwice/Katowice, Hamburg, Amsterdam or Stockholm.
The Threat Management Team needs to develop capabilities in the field of Threat & Vulnerability Monitoring as well as to include more assets into scanning scope for vulnerabilities. Especially being able to manage all kinds of IT assets in a secure way requires transparency and complete security scanning of all devices reachable within the VF network and manage vulnerabilities found with asset owners within or outside the organization. Background in Network and IT Security matters is required in this position.

Your Job as a IT Security Officer (Threat Management) 
Do you want to advise Vattenfall organization about IT & Information security risks and are aware of the latest digital security trends, technologies, laws and regulations? Do you also know this area well, have a pragmatic attitude and like to work in a dynamic international environment? Then you might be the Network Security Engineer for the IT Security Threat Management Team at VIT that we are looking for to further strengthen our IT Security function!
IT Security is an increasingly important discipline for Vattenfall business through a fast evolving digitalization as well as cyber threats and regulations. Therefore we are looking for an ambitious person with management background and experiences within Security area.


Your responsibilities
Within the Threat Management team you will be part of the planning, development, and execution of Threat Management activities at Vattenfall IT.
Oversight of Threat and Vulnerability Management (TVM) processes
Formulate identified security improvement needs towards IT Security Portfolio Managements
Vulnerability and Compliancy scans of assets
BU/BA related vulnerability reporting
TH/risks/vulnerabilities integration process
Vulnerability Mitigation Coordination
Evaluate and maintain necessary tooling
Provide tactical advise and consultancy on IT Security domains especially on network infrastructure and security, whether on premise or in the cloud
Support development of IT Security standards, guidelines, security concepts and frameworks for VF Group.
Contribute and perform security reviews including threat modelling assessments on system architecture level.
Support risk assessments and actively follow up identified risks with the risk owners for an agreed risk treatment.
Provide recommendations and advise on critical security changes in IT as part of the security related processes.
Evaluate, tests, monitors and maintain information systems (IS) and cyber security policies, procedures and systems
Creates, implement and oversees identity management systems to meet specific security needs and complex compliance standards
Ensure that IS and cyber security plans, controls, processes, standards, policies and procedures are aligned with IS standards and overall IS and cyber security
Identify security risks and exposures, determines the causes of security violations and suggests procedures to halt future incidents and improve security
Develops techniques and procedures for conducting IS, cyber security and access and identity risk assessments and compliance audits, the evaluation and testing of hardware, firmware and software for possible impact on system security, and the investigation and resolution of security incidents such as intrusion, frauds, attacks or leaks




This position will require / will support / develop
thorough understanding of IT Security Management Framework at Vattenfall IT and on Vattenfall Group Level
thorough understanding of Threats against IT and abilities to develop, manage and oversee the potential mitigation activities in cooperation with IT Security portfolio
Lead, manage and motivate the team to achieve tactical and strategic goals - Proactively work with Other Departments to facilitate practices that meet the objectives and standards
Provide day-to-day analytic and strategic leadership for key organization-wide strategic initiatives to ensure implementation is consistent
Align with stakeholder of VIT and Business like CIO-Office / IT Strategy Department, Business IT Security representative, line management, IT Risk Management




Your Profile as a IT Security Officer (Threat Management)
We believe that you have education and experience equivalent to a Bachelor's degree with major course work in business, public administration, and/or information systems and or more than 5 year(s) of experience in IT Security and or Network Management. You have minimum 2 years of experience in relevant IT position in an international/corporate environment and are fluent in English, other languages such as Swedish, German, Dutch are of additional value. You have a high degree of co-operation and collaboration capabilities in a distributed work environment. Also you have proven technical or project management expertise in one or more of the infrastructure and/or application security areas/projects. Good understanding of project management is needed, so respective capabilities as Certification IPMA D is of additional value, but -not- mandatory. Relevant IT security-specific certification will be also an advantage (e.g. CISSP, CISM) , but -not- mandatory.


Further Information
We welcome your application in English, including resume and cover letter.
We look forward to your application! For further information about the position or the recruitment process, please contact responsible Dominik Friebe. (+49 (0)40 79022 1374
Trade union representatives in Sweden (IT) are Vatkovic Silvija (Akademikerna), Inger Strandberg (Unionen), Christer Gustafsson (Ledarna), Lennart Bengtsson (SEKO). To get in contact with the representatives, please call Vattenfall´s switchboard +46 8 739 50 00.
Since Vattenfall is part of the Swedish critical infrastructure many of our positions are security classed. If this position is security classed the final candidates can be subject to a security vetting process, according to the Swedish legislation.
Öppen för alla
Vi fokuserar på din kompetens, inte dina övriga förutsättningar. Vi är öppna för att anpassa rollen eller arbetsplatsen efter dina behov.