Information Security Specialist in Incident Management & CSL

Project overview

We are looking for an Information Security Specialist in Incident Management & CSL for Malmö stad.

Assignment Description:

Review of Malmö stad's handling related to significant incidents according to CSL and help us conduct a comprehensive investigation and take our handling to the next level.

You will lead the work with the investigation of Malmö stad's handling of significant incidents and will be supported by resources from "Security and Preparedness" at the City Executive Office and from the IT-Sec team from the city's central IT and digitalization department at the Service Administration.

Competence Level:

Level 2 High generalist competence

Experience must relate to work within the relevant competence area and be clearly stated in the CV.

Requirements

Things that must be included in the tender:

CV in Swedish

Price

Competence-specific references – At least 2 investigations/implementations of working methods according to NIS2, CSL, or investigation for incident process, of which at least 1 for a municipality or public administration performed in the last 4 years. (include in a separate appendix for references)

Execution of the assignment, times, and scope:

Start date: As soon as possible

End date: 2027-05-31

Scope: 100%

Place of execution: The work is performed 100% on-site.

Compensation form: Compensation will be paid at an hourly rate against running account.

Travel and travel time: No compensation is paid for travel or travel time.

Option – scope: Yes, there is a possibility that the client may order additions/extensions to the contract.

Additions may include a second phase in the investigation work or support in implementing any adjustments related to incident management.

Option – time:

Yes, there is a possibility that the client may extend the contract.

Maximum until 2027-12-31.

Last day for response: 2026-11-11

Assignment conditions are according to the framework agreement.

PayExpress:

We now offer a fast and smooth payment solution, so you avoid long waiting times. With us, you get your payment within 3–5 days after your timesheet has been approved. This benefit is included as standard in almost all our agreements without extra work on your part. Read more at the link below:

https://knowledge.eworkgroup.com/payexpress-get-paid-within-days-not-months

• The consultant must have at least eight years of documented experience in information security, cybersecurity, or incident management in large organizations.
• The consultant must have documented experience in leading or having a central role in incident management within public operations.
• The consultant must have documented experience in conducting investigations and developing processes within incident management.
• The consultant must have documented experience in translating requirements according to NIS2 and the Cybersecurity Act into processes, routines, governing documents, or other practical working methods within information or cybersecurity.
• The consultant should have at least five years of documented experience in information security or cybersecurity work within municipal operations.
• The consultant should have documented experience in implementing incident management processes.

Project details

• Start: 2026-11-23
• Remote: onsite
• Location: Malmo, Sweden, SE
• Languages: Swedish