IT/OT Cybersecurity Team for Cyber-Physical Infrastructure

Project overview

Assignment Description

We are looking for an experienced and cross-functional consulting team for a long-term assignment with a major public organization in Stockholm. The assignment will initially involve three full-time consultants, but the team's size and competence needs may change over time.

The organization is responsible for socially critical infrastructure and complex cyber-physical environments where IT and Operational Technology (OT) interact, for example in traffic control, tunnels, bridges, and other technical installations. The operations are undergoing extensive technological change with a focus on modernization and strengthened cybersecurity based on the Cybersecurity Act (2025:1506).

The assignment includes technical development and lifecycle management of IT and OT systems, technical investigations, solution design, project management, and coordination. The work also includes IT infrastructure, networks, system integrations, migration, security configuration, patching, access management, and the implementation of technical, organizational, and physical security measures.

The team is also responsible for testing, deployment, management, operational support, incident and continuity management, as well as developing long-term working methods and operational functions. The work is carried out in close collaboration with internal teams, consultants, technology suppliers, and contractors within operations, IT, OT, information security, and technical management.

Delivery Capacity and Competence Levels:

The supplier must be able to provide at least six (6) consultants with collective competence in the development and lifecycle management of systems and platforms.

The team must meet the following competence distribution:

Other consultants must contribute to ensuring the requested breadth of competence within the contract area.

• Level 1 – Junior: Maximum one (1) consultant.
• Level 2 – Experienced: Minimum one (1) consultant.
• Level 3 – Senior: Minimum two (2) consultants.

Requirements

Each consultant at competence level 2 or 3 must meet the following requirements:

The team must collectively have competence in IT, OT, cybersecurity, and cyber-physical infrastructure to meet the assignment's needs.

• You must have experience in strategic and operational technical information security work related to current cybersecurity legislation or previous NIS legislation.
• You must have a relevant university degree in, for example, systems science or technology, or at least 5 years of professional experience in the field.
• You must have experience with assignments in public administration.
• You must be able to lead workshops and have good communication and pedagogical skills.
• You must have a good ability to coordinate and collaborate with different competencies.
• You must be able to plan and structure work.
• You must be able to communicate well verbally and in writing and collaborate with staff and other consultants.
• The supplier must present an initial team of three named consultants who meet the following requirements:
• All must meet at least competence level 2, with at least 8 years of experience in the field.
• All must be available 100% during the period January 2, 2027 – June 30, 2027.
• All must be included in the reported delivery capacity and have CVs that prove their competence.
• The team's collective competence, experience, and delivery capability must be described.

Project details

• Start: 2027-01-04
• Location: Stockholm, SE, SE
• Languages: Swedish