Security Specialist Data Security

We are on a journey to transform our digital capabilities, bringing core business processes, people, data & technology together - an enabler for IKEA to become an even better home furnishing retailer in the future. A journey that needs passionate people who embrace change, dare to question and want to make a difference. If that sounds like you, come and join us. Together we can do great things!
About the role
We are seeking a Security Specialist with expertise in data security, data loss prevention (DLP), encryption, and good knowledge on AI security related topics to protect our digital assets. In this role, you will assess, develop, and implement data security solutions that safeguard sensitive information across digital products and platforms. As part of the Cybersecurity Protection team, you will work cross-functionally with Information Security, Risk, Compliance, Data Management, and Engineering teams.
More specifically in this role, you will:
Contribute to the development of a strategic approach and roadmap for data security and protection, including establishing data security standards and guidelines
Conduct security risk assessments of digital products and platforms, including use of AI technologies, to identify and mitigate data security risks
Develop, implement and maintain data security controls and associated secure data handling procedures to protect sensitive data across cloud, hybrid and on-premises
Design, deploy and manage DLP solutions to monitor, detect and prevent unauthorised data access, transfer or leakage
Configure DLP solutions to protect sensitive data and ensure correct policies are applied to prevent data breaches
Monitor DLP alerts and logs, investigate incidents, and escalate when necessary, providing detailed reports and recommendations
Support with the data classification, labelling and implementation of data security and access control policies in digital products and platforms
Assist in creating and maintaining documentation for security policies, procedures, and incident response process related to data security and protection
Collaborate with the Security Operations and Incident response team to perform root cause analysis of security incidents and recommend improvements to prevent recurrence.
Collaborate with software, data and platform engineering teams to embed data security measures throughout the systems lifecycle, from development to deployment, including for AI systems
Stay updated on emerging threats in AI security and implement AI-specific threat detection and mitigation strategies
Conduct training and awareness programs for digital product and platform teams on data-centric security risks and best practices

About you
Are you a cybersecurity specialist, passionate about securing and protecting confidential data from threats? Do you have a knack for spotting trends and finding creative solutions to complex problems? If so, then come join our small but fast-growing cybersecurity team at IKEA. We're a group of bright, energetic individuals who are dedicated to making healthy and sustainable living more accessible and affordable for everyone.
As our ideal candidate, you bring in a mix of technical data security expertise with the ability to effectively interact and engage with stakeholders across different IT, business and information security functions. You have:
5+ years’ experience in designing, implementing and supporting data security solutions covering DLP, data encryption and cryptographic key management in a hybrid technology landscape
Experience in deploying and managing Microsoft Purview data security solutions and other industry DLP tools
Experience in advising, consulting and guiding business and IT stakeholders on how to handle data securely across its lifecycle from creation and storage to use and disposal
Skills in generating reports and analytics on data security and compliance posture and integrating these insights into broader security measures, such as threat monitoring
Familiarity with Cloud Access Security Brokers (CASB), Zero Trust Network Architecture (ZTNA), and Secure Access Service Edge (SASE) and their role in protecting sensitive data
Strong understanding of data protection technologies, including encryption, tokenization, and secure access controls.
Knowledge of data protection regulations (GDPR), AI-specific security risks and security frameworks (ISO 27001, NIST CSF).
Strong analytical and problem-solving skills, with attention to detail in identifying and resolving security vulnerabilities.
Ability to work collaboratively across teams and communicate complex security concepts to technical and non-technical stakeholders.

About IKEA
At IKEA, we do things a little different. We think, differently. Act, differently. And work differently as well. We like to break things. Like rules. And then make things. Like music-playing lamps. And beds disguised as sofas. Even plant balls that help us look after our planet. It’s all part of our vision - to create a better everyday life for the many. And it’s been keeping our co-workers going for over 75 years. By 2030, we hope to help millions more look forward to going home. Maybe you can help us
Are you looking for the challenge of your life? Come on board! You can find more information about our digital journey at Technology and Digital Career Hub at IKEA
The IKEA culture and values are very much a part of our business and day to day work life. For you to thrive and grow with IKEA it’s important for us that you share our values! You can read more regarding our values and life at IKEA on our website www.ikea.com or just watch this video: https://bit.ly/ikea-what-if
About The Area
IKEA Operations Management builds up, delivers, serves and supports shared data and technology for the IKEA value chain. Together we build a digital foundation to enable our core business partners and franchisees to work more efficiently and create a rewarding customer experience in an omnichannel world. Inter IKEA is on a journey to strengthen our ability to protect the IKEA brand from cyber risks and threats by developing, enhancing and implementing a set of cybersecurity capabilities.
Additional Information
This role is full-time (40 hours per week) and will be based in Malmö, Sweden or Delft, the Netherlands. Interested? Please send your CV in English and don’t forget to attach a cover letter, telling us why you would be a good fit for this role.