IT Security Specialist for Digg / Digitalization Agency

Project overview

We are looking for an experienced IT Security Specialist for a consulting assignment at Digg, which from January 1, 2027, will become part of the new Digitalization Agency together with the Swedish Post and Telecom Authority (PTS).

The assignment involves a central role in strengthening the agency's IT security and contributing to a secure and robust digital infrastructure within the public sector.

About the assignment

As an IT Security Specialist, you will strengthen the agency's existing IT security function. You will work both strategically and operationally with information and IT security, with a particular focus on secure system development, microservice architecture, container-based platforms, and information security management systems according to ISO 27000.

The role includes:

REQUIRED REQUIREMENTS

Competence Level 3

The consultant must meet at least competence level 3 as described below.

Knowledge – high competence in the current role

Experience – is a role model for other consultants at a lower level. This level is normally achieved after 4-8 years of work in the current role

Leadership – takes responsibility for a sub-area, can lead a small group

Independence – can work independently

The consultant must:

a) Have competence and experience in working with IT security for system development and production of IT services based on microservices, container-based platforms, and open source.

b) Have knowledge of and experience in working with information security management systems based on the ISO 27000 standard.

c) Have experience in designing and writing governance documents within IT security based on the ISO 27000 standard.

d) Have experience in designing and implementing work methods and processes for establishing and monitoring IT security.

e) Have experience in designing and conducting IT security reporting to management and stakeholders.

f) Have experience with risk analyses and impact assessments within information and IT security.

g) Have experience in leading groups and functions responsible for IT security.

h) Have very good knowledge of Swedish and English, spoken and written.

SHOULD REQUIREMENTS / MERITORIOUS EXPERIENCE

The consultant should:

i) Have experience in designing, reviewing, and implementing technical IT security solutions and security measures.

j) Have experience in designing and implementing methods for vulnerability management.

k) Experience in setting requirements and following up on information and IT security for an agency connected to National IT Operation in Cooperation (NITIS).

Assignment Information

Client: Digg / Digitalization Agency

Role: IT Security Specialist

Competence Level: Level 3 (normally 4–8 years of experience)

• Participating in IT security work according to established methods and processes.
• Developing and ensuring compliance with the agency's information security management system based on ISO 27000.
• Working with the follow-up and reporting of IT security within the agency.
• Designing governance documents and informing and educating the organization about identified risks, security needs, and recommended measures.
• Acting as a support and mentor for employees and consultants in the IT security area.
• You are expected to be able to work independently, take responsibility for your area, and contribute with both technical expertise and structured security work.

Project details

Sundsvall or Stockholm

Work Arrangement: Hybrid, at least 3 days per week at the agency's office. Additional office presence may be required.

Scope: 100%, 40 hours per week

Start Date: 2027-01-07

End Date: 2027-12-31

Extension Option: 2 × 6 months, until 2028-12-31

Security Clearance: No

Application Deadline: 2026-11-09

Other Information

The assignment is a consulting assignment and requires you to be able to work on-site in Sundsvall or Stockholm at least three days a week.

Before starting the assignment, the consultant must sign a confidentiality agreement and complete the agency's mandatory security training. Work must be performed within Sweden's borders and with equipment from the agency, unless otherwise agreed.

Application

Are you an experienced IT Security Specialist with a good understanding of both technical security and information security governance? Then this is an opportunity to contribute to the security of Sweden's public digital infrastructure.

Please submit your CV in Swedish and a brief description of how you meet the assignment's REQUIRED and SHOULD requirements.

We need your expression of interest by November 9, 2026.

• Start: flexible
• Remote: hybrid
• Location: Stockholm, SE
• Languages: Swedish