IT Security

Schibsted; Oslo fylke; Hybrid; NOK 700,000 - 900,000; Full time

Job summary

Schibsted is seeking an IT Security Engineer to strengthen our cybersecurity across Sweden and Norway, with Oslo, Stockholm or Krakow as possible hubs. You will implement and refine security controls, review configurations, and respond to incidents to protect journalism platforms and data.

You'll work in a hands-on role across diverse environments, collaborating with infrastructure, networks and editors. Candidates with 3+ years in IT security, SIEM, DLP and vulnerability tools are encouraged to

Qualifications

• Three+ years of experience in IT security roles with hands‑on implementation of security controls and technologies.
• Experience with endpoint, network and infrastructure security.
• Practical use of SIEM, DLP and vulnerability scanners.
• Understanding of networking, operating systems and cloud platforms.

Responsibilities

• Assess and strengthen security controls across infrastructure, systems and devices.
• Design, deploy and maintain security solutions (firewalls, IDS/IPS, VPNs, EPP).
• Monitor logs, investigate threats and respond to incidents to minimise impact.
• Conduct security audits and assessments with internal teams and vendors.
• Develop and maintain security policies, standards and procedures.
• Collaborate with auditors and regulators on security assessments.
• Mentor juniors and share security knowledge across teams.

Skills

Security engineering

SIEM

DLP

Vulnerability scanners

Endpoint security

Network security

Cloud security

Threat analysis

Communication

Collaboration

Tools

SIEM tools

Vulnerability scanners

DLP tools

Job description

At Schibsted, cybersecurity is about more than protecting systems and applications. It's also about protecting journalism, the people behind it, and the technology that makes independent news accessible to millions of people.

We're looking for an IT Security Engineer to join our cybersecurity team, preferably in Oslo or Stockholm. We may also consider candidates based in Krakow. This is an opportunity for an experienced security engineer who enjoys hands-on technical work, solving problems across different environments, and working with others to make systems more secure.

First, a little about us

Schibsted is one of the leading media groups in the Nordics, home to well-known news brands including Aftonbladet, Svenska Dagbladet, VG and Aftenposten. Every day, millions of people turn to our news organisations to stay informed, understand the world around them, and access independent journalism.

Behind these brands is a large and diverse technology organisation, building and maintaining the digital products, platforms and infrastructure that make all of this possible.

And with that comes an interesting security challenge.

Our news brands are highly visible, and the threats we face go beyond those of a typical corporate environment. From protecting systems and sensitive information to safeguarding journalists and ensuring uninterrupted access to news, cybersecurity plays an important role in keeping our journalism accessible and independent.

That's where you come in.

What you'll be working on

As an IT Security Engineer, you'll help strengthen the security of the infrastructure, systems and devices that our organisation relies on every day. You'll analyse risks, design and implement security solutions, and maintain the controls that protect our systems and data.

You'll be part of a cybersecurity team working across Sweden and Norway. As part of the technology organisation, the team works closely with colleagues responsible for infrastructure, networks, user devices and collaboration tools, as well as journalists and editors. A big part of your job will be working with security technologies. But putting a tool in place is only the beginning. You'll also make sure those tools work effectively in practice: reviewing how they're configured, investigating potential threats, and helping teams address weaknesses before they become bigger problems.

Some of the things you'll do:

• Assess our existing security controls, identify areas for improvement and implement practical ways to reduce risk.
• Improve, deploy and maintain security solutions, including firewalls, intrusion detection and prevention systems, VPNs and endpoint protection.
• Monitor network traffic and security logs, investigate potential threats and respond to incidents to minimise their impact on operations.
• Carry out security audits and assessments to identify and address weaknesses in our systems and networks.
• Define security procedures for working with vendors and third-party providers.
• Develop and maintain security policies, standards, procedures and guidelines in line with regulatory requirements and industry standards.
• Work with external auditors and regulatory bodies on security audits and assessments.
• Guide and mentor junior colleagues, share knowledge and contribute to security training and education programmes.

Who we're looking for

You're an experienced IT security professional who enjoys understanding how systems work, where they might be vulnerable and what it takes to protect them. You're comfortable working hands-on with security tools, but you also know that effective security depends on clear communication and collaboration.

You might come from a dedicated security engineering role or have built your security expertise on a background in network and system administration. What matters is your practical experience implementing security controls and your ability to turn technical findings into improvements that work.

We'd love to hear from you if you have:

• At least three years of experience in IT security roles, including hands‑on implementation of security controls and technologies.
• A strong grounding in endpoint, network and / or infrastructure security.
• A practical experience using tools such as Security Information and Event Management (SIEM), data loss prevention (DLP) and vulnerability scanners.
• A good understanding of networking protocols, operating systems and cloud computing platforms, and the ability to investigate and troubleshoot security‑related issues.
• An analytical approach to problem‑solving and the ability to prioritise when several tasks need your attention.
• The ability to explain technical concepts clearly and work effectively with both technical and non‑technical colleagues.

Relevant certifications such as CISSP or CISM are also valuable, as is an understanding of the particular security challenges facing a media organisation, but neither is a requirement.

We're looking for someone who's proactive, collaborative and willing to share what they know. Someone who doesn't just want to identify security problems, but enjoys working with others to solve them and strengthen how we work.

Why join us?

Work that matters. The technology you help protect supports independent journalism and news organisations that play an important role in society.

Interesting security challenges. You'll work across a diverse technology landscape, protecting infrastructure, systems and devices with different security needs.

An opportunity to develop your expertise. You'll combine security engineering, incident response and risk reduction, working with cybersecurity colleagues and technology teams across the organisation.

A role that combines technology and people. You'll get to dive into technical security challenges while building relationships and helping colleagues put effective security measures into practice.

Room to make an impact. You'll contribute to the security solutions, processes and standards we build, while sharing your experience and supporting the development of junior colleagues.