Your role: 

• Assess and design secure and compliant solutions with our customers, bringing the security requirements and best practice early into the design process and monitor their implementation 

• Build relationships and collaborate with stakeholders, system owners and IT specialists to ensure all visions are aligned 

• Implement administrative and technical security controls throughout the global IT environment 

• Evaluate IT infrastructure changes and requests that impact security 

• Provide security requirements to projects and activities based on established security policies and standards 

• Assist with internal and external security audits and assessments 

• Facilitate third party security assessments 

• Collaborate with the GRC team assisting with risk assessments and providing risk mitigations and subject matter expertise 

• Collaborate with the CSIRT team to ensure that the findings are addressed through robust processes and IT security architecture 

• Contribute to the continuous improvement of the security policies and processes, using your experience, observation and communication skills as well as ongoing research in the cybersecurity field 

Your profile:  

• You have a university degree in technical subjects, preferably IT security, and you have 3-5 years of work experience within the IT Security field (relevant Master’s degree can compensate for less work experience) 

• You have in depth technical knowledge within the main areas of IT security including LAN/WAN networks and communication security, software development security, client/server security, cloud security, identity and access management and security operations. 

• Preferably work experience with IT security frameworks and standards such as CIS Controls, NIST CSF and ISO 27001 

• Work experience with risk assessments and risk management process is an advantage 

• Work experience with security- and penetration testing is an advantage 

• You are ethical, professional, structured, proactive and ambitious 

• You are passionate about cybersecurity and keep up to date with the latest security and technology developments  

• You are fluent in English and Norwegian, both oral and writing 

Statkraft manages critical infrastructure and services in several countries. We conduct background checks on qualified applicants before hire and in this role you must qualify for Swedish security clearance and authorization.