IT Protective Security Specialist - Nuclear
Location
Solna, Stockholm, Sweden
Contract Details
- Start Date: 1st February 2027
- End Date: 31st March 2027
- Hourly engagement; no additional benefits specified
Role Overview
Seeking an experienced IT Protective Security Specialist to conduct a comprehensive review of the current IT environment from a Swedish protective-security perspective. The consultant will map relevant systems, processes, dependencies, and protected assets, identify weaknesses in existing protective-security arrangements, and recommend proportionate improvements. The role has a strong technical focus and will assess security controls within sensitive IT environments, including network architecture, system communications, identity and access management, logging, monitoring, and system hardening. The consultant will work closely with other protective-security specialists and stakeholders across the organisation.
Key Responsibilities
- Conduct technical protective-security reviews of IT infrastructure, applications, and digital services.
- Assess security architecture and technical protection mechanisms within security-sensitive systems.
- Review network architecture, system communications, identity and access solutions, logging, monitoring, hardening, and other technical security controls.
- Map systems, business processes, dependencies, and protected assets across the relevant IT environment.
- Identify missing controls, processes, safeguards, and other weaknesses within existing protective-security arrangements.
- Conduct threat and vulnerability assessments from a protective-security perspective.
- Support business and IT teams with the implementation of agreed protective-security measures.
- Contribute to security reviews of solution architecture, system designs, and infrastructure changes.
- Coordinate and lead workshops, interviews, and working sessions with business and IT stakeholders.
- Ensure alignment with the Swedish Protective Security Act, relevant authority requirements, and internal governance frameworks.
- Document assessments, conclusions, recommendations, and decision-support material clearly and consistently.
- Develop practical improvement proposals and action plans covering organisational, administrative, technical, and physical security measures.
Security Assessments and Analysis
- Update existing or produce new Special Protective Security Assessments (Särskilda Säkerhetsskyddsbedömningar, SSB).
- Support or develop Protective Security Analyses (Säkerhetsskyddsanalyser, SSA).
- Describe the IT environment from a technical perspective in line with applicable legislation and authority requirements.
- Analyse protected assets, potential consequences, protective-security needs, and appropriate safeguards.
- Translate identified risks and gaps into concrete recommendations and prioritised remedial actions.
Essential Skills and Experience
- Documented experience working with protective security under the Swedish Protective Security Act.
- Experience producing or updating technical SSB and SSA documentation.
- Several years of experience in IT security, cybersecurity, or security architecture within complex IT environments.
- Strong understanding of networks, server platforms, virtualisation, cloud services, and modern IT infrastructure.
- Experience in security architecture, technical security reviews, risk assessments, or comparable assurance activities.
- Good understanding of how protective security, information security, and cybersecurity interact within critical infrastructure and essential services.
- Experience in risk management, security analysis, and regulatory-compliance work.
- Ability to manage complex assignments independently and coordinate numerous stakeholders.
- Strong written and verbal communication skills, including the ability to present technical assessments and recommendations to both technical and business audiences.
Advantageous Experience and Education
- Experience within a large organisation or another environment subject to demanding regulatory requirements.
- Experience coordinating protective-security arrangements, collaboration, or contractual requirements between multiple operators or organisations.
- Relevant education in Information Security, Cybersecurity, IT, Security Protection, or a comparable discipline.
Security and Eligibility Requirements
- This assignment requires a Nuclear Security Protection Agreement process (SUA), and the consultant must satisfy all applicable screening and clearance requirements.
- Candidates must be Swedish citizens and must have lived in Sweden for at least five years.
- Where the supplier does not already hold an active Nuclear SUA agreement, a process may be initiated that is expected to take approximately six to eight weeks.