Role: IT Security Consultant

Seniority Level: Senior

Location: Gothenburg, Sweden

Remote: 50%

Application Deadline: 16 June 2025

Working Hours: Approx. 20 hours per week

Assignment Description:

For our client, we are seeking an experienced IT Security Consultant to support the requirements specification during the procurement process for a new IT operations provider.

Purpose of the Assignment:

To ensure that requirements related to information security, IT security, and regulatory compliance (e.g. NIS2, GDPR, ISO 27001) are properly defined and integrated into the procurement documentation, and that supplier capabilities are evaluated in a structured manner.

Scope of Work:

The consultant will support with:

• Reviewing the organization's existing security policies and guidelines.
• Identifying and drafting relevant security requirements for the operations provider, including:
• Availability, integrity, and confidentiality
• Roles and access control
• Logging, monitoring, and incident management
• Encryption and data protection
• Access management
• Supplier security governance and processes
• Requirements on third-party subcontractors
• Compliance with GDPR, NIS2, ISO 27001, etc.
• Preparing procurement documentation (e.g. requirements specification, RFQ documents).
• Supporting the creation of evaluation criteria related to security.
• Participating in supplier discussions or bid evaluations, if needed.

Required Qualifications:

The consultant should have documented experience in:

• Defining requirements in public or private procurement of IT operations or services.
• IT and information security, ideally with certifications such as CISM, CISSP, or equivalent.
• Knowledge of relevant frameworks and regulations (e.g. NIS2, GDPR, ISO 27001, MSB regulations).
• Understanding of cloud services, hybrid environments, and IT operations.
• Experience with similar assignments in the public sector is a strong merit.

Deliverables:

• Documented security requirements for procurement materials
• Evaluation criteria related to security
• Participation in supplier meetings or Q&A sessions
• Final report or summary of the security-related procurement work

Languages Required:

• Swedish (Proficient)