Assignment description

We are looking for a temporary IT Security Advisor for a six-month assignment within the client’s IT Security Advisory team, part of Group IT Cybersecurity – Architecture & Advisory.



The IT Security Advisor supports and guides system owners, product teams and projects in selecting suitable IT security solutions aligned with the client’s IT Security Policy and Framework. The assignment will add capacity for IT Security Guidance and IT Security Reviews, ensuring that solutions are assessed before going into production.



The role is advisory only and does not include implementation, remediation or operational security tasks.



Role responsibilities

• Provide IT Security Guidance regarding solution design, applicable security requirements and potential risks.
• Conduct independent IT Security Reviews of technical solutions, including documented findings, risk rationale and formal recommendations regarding production readiness.
• Facilitate risk assessments and add threat and technical-impact perspectives to the assessment process.
• Act as the Cybersecurity representative in projects and initiatives.
• Contribute to service improvements and provide input to policies, procedures and guidelines.

• 
  

Seniority

This is a specialised role requiring both broad and deep expertise within information security. The consultant interprets internal and external business issues, recommends best practices and solves difficult or complex problems. The role requires a broad perspective to identify effective solutions and the ability to work independently, with guidance needed only in the most complex situations.



In summary:

Specialised professional individual contributor.

Works independently with little or no supervision.

Manages small to medium-sized projects or processes.

Handles difficult and sometimes complex problems.

Influences others regarding policies, practices and procedures.

Requirements and qualification criteria

Experience in IT security advisory, security architecture or security review work within a large enterprise environment is mandatory.

• 
  

  Requirements and qualification criteria

  Experience in IT security advisory, security architecture or security review work within a large enterprise environment is mandatory.

  
  

  Required skills

  IT Security Reviews and Risk Assessments

  Proven experience reviewing solution designs and technical documentation against security requirements, identifying risks and gaps, and producing clear, actionable findings and recommendations.

  
  

  Security Frameworks and Governance

  Familiarity with ISO 27001, ISO 42001, NIST CSF, CIS Controls or similar frameworks, with the ability to apply policy-based requirements pragmatically.

  
  

  Cloud, Microsoft 365 and Active Directory

  Knowledge of security design and reviews for SaaS, PaaS and IaaS solutions, preferably in Azure, as well as integrations involving identity and access management, encryption and logging. Understanding of Microsoft 365 integrations, application permissions such as Microsoft Graph, and Active Directory security is required.

  IT Security Expertise

  Strong technical and architectural knowledge of IAM, endpoint security, data protection, encryption and AI-related security.

  
  

  Communication and Stakeholder Management

  Excellent written and verbal communication skills in English, with the ability to explain security risks to both technical and non-technical stakeholders.

  
  

  Meriting skills

  • Experience with supplier security assessments, including CAIQ, security questionnaires and security requirements in contracts.
  • Knowledge of infrastructure and network security, including firewalls, segmentation and hybrid environments.
  • Certifications such as CISSP, CISM, CCSP, SC-100, AZ-500 or equivalent.

  
  

  Nice to have

  • Swedish language skills.
  • Experience from industrial, manufacturing or other security-conscious sectors.
  • Familiarity with ServiceNow-based workflows.

  
  

  Erfarenhet

  Level 4 Senior * Knowledge – high generalist competence, or very high competence in the current role. * Experience - has carried out complex tasks within current role and implements * Consulting service with very high quality. * Management – takes primary responsibility for management of a larger group. * Independence – very big.

  
  

  Startdatum: 2026-11-09

  Slutdatum: 2027-04-31

  Omfattning: 100%

  Ort: Stockholm

  Språk: Svenska och Engelska

  
  

  Vi offererar löpande och ärendet kan komma att stängas ner innan satt deadline.

  
  

  Vänligen ansök direkt via vårt system med:

  - uppdaterat CV

  - timpris (inkl. omkostnader)

  - information kring tillgänglighet för att påbörja uppdraget

  - Kortare motivering där du speglar själva uppdragsbeskrivningen och gör det tydligt hur du uppfyller satta krav från kunden. Lyft gärna 1-2 referensuppdrag som du tror är extra relevanta för det aktuella uppdraget och gör din profil till en god match.