Strategic Cybersecurity Architect: Cloud & Threat Modelling

SSAB; Stockholms kommun; On-site; SEK 1,200,000 - 1,520,000; Full time

Job summary

SSAB seeks an experienced Cybersecurity Architect to shape and secure our digital future. You will define security architecture, standards, and requirements, collaborating with technology teams and suppliers to embed security by design in all programs.

The role reports to the Group CISO and offers Stockholm or Helsinki bases. You will lead threat modelling, design reviews, and security guidance across cloud, identity, network, OT, and infrastructure domains, helping teams reduce security debt

Qualifications

• 10+ years of experience in cybersecurity architecture, cloud security, infrastructure architecture, or software/security engineering.
• Hands-on implementation experience integrating cybersecurity systems such as vulnerability scanning tools or a SOAR platform.
• Strong expertise in Azure and hybrid-cloud security architecture; Azure certification is a plus.
• Broad experience with application security, IAM, network security, and infrastructure security.
• Familiarity with AI/ML tools and their security applications.
• Experience performing architecture reviews, threat modelling, and risk assessments.
• Certifications such as CISSP, GICSP, SABSA, TOGAF; IEC62443 knowledge appreciated for industrial settings.
• Ability to translate technical security requirements into actionable guidance and build stakeholder relationships.
• Fluency in English; Nordic language skills are an advantage.

Responsibilities

• Define and maintain SSAB's cybersecurity architecture strategy and target-state.
• Establish security standards, reference architectures, and ensure Secure-by-Design in programs and initiatives.
• Review and guide cloud, application, identity, network, infrastructure, and OT architectures.
• Drive cybersecurity architecture assessments, threat modelling, and design reviews.
• Identify gaps and advise teams on remediating vulnerabilities and technical debt.
• Develop cybersecurity requirements for secure software development and DevSecOps.
• Support Zero Trust, identity governance, cloud security, and emerging technologies.
• Collaborate with suppliers, architects, and engineering teams to implement security controls across the organization.

Skills

Cybersecurity architecture

Cloud security

Threat modelling

DevSecOps

Azure

Hybrid-cloud security

Stakeholder mgmt

Tools

Vulnerability scanners

SOAR platform

Job description

SSAB seeks an experienced Cybersecurity Architect to shape and secure our digital future. You will define security architecture, standards, and requirements, collaborating with technology teams and suppliers to embed security by design in all programs.

The role reports to the Group CISO and offers Stockholm or Helsinki bases. You will lead threat modelling, design reviews, and security guidance across cloud, identity, network, OT, and infrastructure domains, helping teams reduce security debt