Lediga job som Säkerhetsarkitekt

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Stockholm – vår huvudstad med miljoner drömmar, förväntningar och ambitioner. Vi jobbar för alla som lever här idag och i framtiden. Nu söker vi dig som vill tänka stort, nytt och annorlunda med oss – för stockholmarna.

Hägersten-Älvsjö är en av 11 stadsdelsförvaltningar i Stockholms stad med cirka 3000 medarbetare. I dag är vi ett av stadens största stadsdelsområden med ca 130 000 invånare. I Hägersten-Älvsjö har du nära till staden, kommunikationer och naturen. Vi erbjuder en dynamisk arbetsplats med möjligheter för dig att utvecklas i din roll.

Välkommen till oss

Hägersten Älvsjö stadsdelsförvaltning ligger centralt vid Telefonplan med närhet till både buss och tunnelbana. Hos oss kliver du in i ett meningsfullt arbete där du verkligen gör skillnad- på en arbetsplats där det är lätt att trivas. Vi värdesätter samarbete, engagemang och en god stämning på jobbet. Här finns det plats för både skratt i fikarummet och fullt fokus när det behövs.

Vi erbjuder

Vi erbjuder flexibel arbetstid för en god balans mellan arbete och privatliv och vi värnar om din hälsa genom generösa friskvårdsförmåner samt möjlighet till hemarbete när arbetsuppgifterna tillåter.

Hos oss erbjuds du en spännande roll som informationssäkerhetssamordnare där din kompetens och nyfikenhet får ta plats, samtidigt som du bygger goda relationer i verksamheten. Du skapar förståelse och engagemang kring informationssäkerhet och driver arbetet framåt – tillsammans med andra.

Din roll

Som informationssäkerhetssamordnare (ISAM) har du ett tydligt uppdrag att leda, samordna och utveckla förvaltningens arbete inom informationssäkerhet och dataskydd. Du fungerar som stadsdelsförvaltningens CISO men arbetar i linje med stadens gemensamma riktlinjer och beslutade inriktningar och fungerar som en länk till stadens centrala informationssäkerhetsfunktion.

I rollen ingår att:

• utveckla, implementera och förvalta förvaltningens informationssäkerhetsarbete.
• utföra risk- och sårbarhetsanalyser, samt upprätta och uppdatera lokala styrdokument, anvisningar och rutiner.
• säkerställa att system och rutiner uppfyller stadens säkerhetskrav samt att incidenter förebyggs, utreds och följs upp.
• leda förvaltningens arbete med att klassa verksamheternas information
• delta på informationsklassningar av system, följa upp utbildningsnivå och bidra till ökad säkerhetsmedvetenhet i organisationen.
• samverka med andra ISAM och DSO inom staden, samt vara rådgivande och stödjande gentemot chefer och medarbetare.
• bevaka förändringar i lagstiftning och informationssäkerhetshändelser i omvärlden, samt rapportera relevanta iakttagelser till ledningen

Din kompetens och erfarenhet

Vi söker dig med:

• relevant högskoleutbildning eller yrkesinriktad specialistutbildning inom informationssäkerhet, IT, juridik eller annat närliggande område. Lång och aktuell erfarenhet av kvalificerat informationssäkerhetsarbete kan motsvara formell utbildning
• förståelse för och erfarenhet av regelverk som rör informationssäkerhet och cybersäkerhetslagen, samt hur dessa påverkar verksamhetens styrning och riskhantering
• erfarenhet av klassning av information och IT-system
• mycket god förmåga att uttrycka dig på svenska i tal och skrift.

Vi ser det som meriterande om du har:

• erfarenhet av arbete med informationssäkerhet i offentlig sektor
• kunskap inom offentlighets- och sekretesslagen (OSL)
• kunskap inom cybersäkerhet och informationsteknik, med förståelse för hur tekniska skyddsåtgärder och processer samverkar
• erfarenhet av arkiv och/eller registratur

För att lyckas i rollen söker vi dig som arbetar självständigt, strukturerat och lösningsorienterat och omsätter behov till praktiska och hållbara arbetssätt. Du trivs med många kontaktytor och har lätt för att skapa förtroende och samarbeta med både chefer och medarbetare. Du är pedagogisk, hjälpsam och lyhörd, samtidigt som du tar initiativ, driver utveckling och skapar engagemang för dina frågor.

Vi lägger stor vikt vid dina personliga egenskaper, motivation och ditt engagemang för rollen.

Övrigt

Vi rekryterar utifrån CV och utan det personliga brevet i denna rekrytering för att stärka fokus på de kompetenser och erfarenheter som efterfrågas för denna roll. Istället kommer du att få svara på ett antal frågor i samband med att du söker tjänsten. Vi önskar att du svarar konkret och kortfattat på frågorna, och att det finns en tydlig koppling mellan dina svar och ditt CV.

Rekryteringsprocessen omfattar intervjuer, arbetspsykologiska tester och referenstagning.

Bakgrundskontroll på slutkandidat kommer genomföras.

Varmt välkommen med din ansökan!

Stockholms stad arbetar med kompetensbaserad rekrytering som syftar till att se till varje persons kompetens och därmed motverka diskriminering.

Tänk på att aldrig ladda upp registerutdrag från Polisen (Dataskyddsförordningen, GDPR) i samband med din ansökan.