CLUSTER NORTH DIGITAL / CYBER SECURITY OFFICER - M/F

Securitas; Stockholms kommun; On-site; SEK 600,000 - 800,000; Full time

Benefits offered by this job

Inclusive environment

Career development opportunities

Job summary

Securitas is seeking a Cluster Digital Security Officer to oversee Digital Security across Cluster North, including Sweden, Norway, Finland, Denmark, the UK, and Ireland. The role involves coordinating security activities, monitoring security postures, and executing risk assessments. Candidates should possess a Bachelor's degree in Computer Science or Information Security, along with 5–7 years of relevant experience. Strong collaboration skills and knowledge of ISO 27001 and application security principles are crucial. Opportunity for impact and career growth in a diverse and inclusive environment.

Qualifications

• 5–7 years of experience in Cyber Security, Information Security, or Application Security.
• Minimum of 2 years of experience in IT operations.
• Good understanding of security domains including IAM, endpoint security, and vulnerability management.

Responsibilities

• Coordinate Digital Security activities across the Cluster.
• Ensure consistent implementation of security controls across infrastructure and applications.
• Monitor and assess the security posture of platforms, infrastructure, and applications.

Skills

Cyber Security

Information Security

Application Security

Risk Management

Collaboration

Education

Bachelor’s degree in Computer Science, Information Security, or related field

Tools

ISO 27001

OWASP Top 10

Job description

Digital Security (Cyber Security)

At Securitas, Digital Security (Cyber Security) is focused on protecting our systems, applications, data, and services while enabling secure and reliable business operations.

We ensure the confidentiality, integrity, and availability of information across all countries, with a strong emphasis on technical controls, application security, risk‑based decision‑making, and operational execution.

All countries within our scope are either certified against ISO/IEC 27001 or actively implementing it, ensuring a consistent and structured approach to information security management across the organisation.

Our Approach Focusses on

• Resilience – maintaining service availability during and after incidents
• Control – continuous visibility and management of the security posture across infrastructure and applications
• Trust – delivering secure, reliable, and compliant services
• Alignment – integrating security into business, IT, and application development processes
• Integration – embedding security into platforms, infrastructure, and applications by design

In Practice, This Includes

• Implementing and maintaining core security controls (IAM, endpoint protection, logging/monitoring, vulnerability and patch management, and application security controls)
• Establishing clear governance, accountability, and control frameworks across infrastructure and applications
• Ensuring security is integrated into projects, application lifecycle (SDLC), infrastructure, and supplier lifecycle
• Maintaining continuous monitoring and visibility of threats, vulnerabilities, and control effectiveness across systems and applications
• Identifying and protecting critical assets, business‑critical services, and key applications

Cluster Digital Security Officer (Cluster North)

As a Cluster Digital Security Officer, you will support technical execution, coordination, and oversight of Digital Security across Cluster North (Sweden, Norway, Finland, Denmark, the UK, and Ireland), while also contributing to Group/ Division‑level security priorities.

This is a hands‑on, operational role, delivered as part of a wider Digital Security organization. You will work closely with different Division/Group IT teams, Digital Security Operations, Digital Security, and Country IT teams, operating in a collaborative, multi‑country and multi‑layer (Cluster–Division–Group) environment.

Key Responsibilities

Security Coordination & Team Collaboration (Cluster & Division)

• Coordinate Digital Security activities across the Cluster and support execution of the security roadmap aligned with Division priorities, including application security initiatives
• Ensure consistent implementation of security controls, baselines, and services across infrastructure and applications
• Work closely with GITS, Application teams, Domain and other IT teams to ensure alignment and effective execution
• Contribute actively to the Digital Security community, including sharing practices related to application and platform security
• Provide regular, transparent, and data‑driven reporting on risk posture, control effectiveness, and remediation progress

Technical Security Oversight (Infrastructure & Applications)

• Monitor and assess the security posture of platforms, infrastructure, and applications (on‑prem and cloud)
• Oversee key control areas including vulnerability management, patching, identity and access management, endpoint security, and application security
• Support secure practices across the application lifecycle (SDLC), including awareness of secure design and common vulnerabilities (e.g. OWASP Top 10)
• Ensure effective logging, monitoring, and incident detection capabilities are in place across infrastructure and applications
• Track and assess third‑party and supplier risks, including risks related to applications and integrations

Risk, Compliance & Assurance

• Identify and track gaps against security policies, standards, and mandates, including application security requirements
• Support/execute risk assessments, internal and external audits, and customer assurance activities across Cluster environments
• Drive and follow up on risk remediation plans, ensuring clear ownership and execution across technical teams

Securitas Alarm Monitoring Centers (SOC) Security

In addition to Cluster responsibilities, you will contribute to Division‑level security of Securitas Alarm Monitoring Centers (SOCs) supporting the Domain Digital Security Officer SOC and RVS, which are among the most critical environments within Securitas.

Contributions

• Supporting and overseeing the security posture of SOC environments, including underlying infrastructure and supporting applications
• Ensuring implementation of enhanced technical controls (e.g. network segmentation, strong access control, privileged access management, monitoring, and secure application access)
• Monitoring the availability, integrity, and protection of SOC systems, applications, and data flows
• Supporting incident detection, response readiness, and recovery capabilities for SOC‑related platforms and applications
• Working closely with Infrastructure, Application, SOC and other IT teams to reduce attack surface and strengthen resilience of SOC environments

Ideal Candidate Profile

We are looking for a candidate who combines technical understanding across infrastructure and applications, structured execution, and strong collaboration skills.

Education

• Bachelor’s degree in Computer Science, Information Security, or related field

Certifications (mandatory)

• CISSP or CISM or equivalent

Experience & Knowledge

• 5–7 years of experience in Cyber Security, Information Security or Application Security
• Minimum of 2 years of experience in IT operations
• Good understanding of security domains (IAM, endpoint security, vulnerability management, logging/monitoring, network security, and application security)
• Solid understanding of application security principles, including secure development practices, common vulnerabilities (e.g. OWASP Top 10), and risks in application architecture and integrations
• Good understanding of ISO 27001 standard
• Experience with risk management, audits, or compliance activities
• Understanding of infrastructure environments (networks, servers, cloud platforms) and their interaction with applications

Technical & Analytical Skills

• Ability to assess security posture across infrastructure and applications and identify control gaps
• Comfortable working with security metrics, reports, and risk data
• Understanding of incident detection and response processes, including those impacting applications
• Ability to translate security requirements into practical and implementable actions across infrastructure and application teams

Ways of Working

• Strong team player, comfortable working across countries and functions
• Able to coordinate activities and drive follow‑up without direct authority
• Structured, hands‑on, and execution‑focused mindset
• Clear communicator, able to engage both technical and non‑technical stakeholders
• Proactive, with a focus on practical problem‑solving and continuous improvement

Your Impact

You will play a key role in ensuring that Digital Security is not only defined, but implemented, measurable, and effective across both infrastructure and applications—through strong collaboration, technical oversight, and shared responsibility across Cluster, Division, and Group teams.

What we offer

We are committed to doing the right thing—and doing it well—for both our customers and our employees. Our employees come from diverse backgrounds, bringing a wide range of talents, perspectives, and experiences. We strive for inclusive representation across the company and are committed to equal pay, safe working conditions, gender balance, and an inclusive environment that fosters growth, skill development, and career opportunities.