Security Assessor

at  Sandvik

At Sandvik Group IT we’re now looking for a Security Assessor to join our dynamic Assurance team within the CISO office. We’re responsible for ensuring that our security controls, policies and procedures meet both internal and external requirements.
This is a great opportunity to gain in-depth knowledge of information security by conducting security assessments and tests of security controls related to Sandvik Groups’ Internal Controls program. We’re looking forward to hearing from you!
About your job
In this position, your responsibilities encompass two main areas; IT General Control (ITGC) and Assurance focused security assessments.
Within the ITGC-context, you perform tests on controls that are in the framework established within the ITGC program – ensuring they’re implemented in line with the program guidelines and are operating effectively. You liaise with key stakeholders on testing matters, create and execute an annual testing plan and periodically report the status of the plan. You manage testing evidence and related documentation and provide support to identify remediation actions and consolidate results.

Within the Assurance-focused context, you conduct information security assessments of various nature, such as of Sandvik entities, newly acquired companies, vendors, specific systems or processes, entity-wide processes. Other responsibilities include:

• Develop and implement security assessment frameworks and methodology.
• Provide support and advice to identify remediation actions.
• Support or participate in any activities related to external customer audits and inquiries on our information security or cybersecurity practices.
• Develop and implement continuous monitoring activities.

The location for this position is Gasverket in Stockholm and we apply a hybrid work set-up, allowing you to combine office and remote work.
Your profile
We’re looking for someone with experience in information security and IT processes. It’s beneficial to have a background as a security control tester and experience with tasks related to security programs and IT operations. Previous involvement in internal and external audits is also considered a plus. Acting in a global setting calls for excellent skills in English, both verbally and in writing.
With stakeholder management and social skills, you enjoy collaborating with others, providing feedback on improvement points. You’re proactive and self-driven with the ability to ensure deadlines are met and promptly addressing potential risks. As a skilled planner and collaborative team player, you thrive in structured, organized work environments, contributing to team success and achieving goals.
Our culture
Our role is clear – through every action, every day, we make the shift and advance the world through engineering. We believe in an inclusive, equal and open-minded culture, and we nurture our diversities to form a solid foundation for achieving great results. Add fair and rewarding benefits, as well as many different career options. Are you intrigued? Visit our
website
,
LinkedIn
or
Facebook page
to get to know us further.
Contact information
For further information about this position, please contact Andreia Leiko Matsushita, assurance manager, andreia_leiko.matsushita@sandvik.com.
Recruiting Manager is Jörgen Andersson, Chief Information Security Officer - Sandvik Group.
We’ve already decided on which advertising channels and marketing campaigns we wish to use, and respectfully decline any additional contacts in that matter.

Union contacts – Sweden

• Anders Rönnqvist, Unionen, +46 (0)70 616 41 21
• Göran Norell, Akademikerföreningen, +46 (0)70 616 43 78
• Peter Olsson-Andrée, Ledarna, +46 (0)70 222 48 55

Recruitment Specialist: Lotta Amnebjer Nordqvist
How to apply
Send your application no later than November 6, 2024. Click apply and include your resume and cover letter in English. Please note that we don’t accept applications by e-mail. Job ID: R0071069.
As we aim for a fair recruitment process, we utilize assessment tools to safeguard objectivity. When you apply for this job, you will therefore receive an invitation via email to a personality and logic ability test. Feedback comes immediately after the test has been completed and the selection process begins after the application deadline.
To learn more about our recruitment process, please visit our
career site
or contact HR Services at
hrservices.sweden@sandvik.com
.
Sandvik is a global, high-tech engineering group providing solutions that enhance productivity, profitability and sustainability for the manufacturing, mining and infrastructure industries. We are at the forefront of digitalization and focus on optimizing our customers’ processes. Our world-leading offering includes equipment, tools, services and digital solutions for machining, mining, rock excavation and rock processing. In 2023 the Group had approximately 41,000 employees and revenues of about 127 billion SEK in about 150 countries within continuing operations

• Develop and implement security assessment frameworks and methodology.
• Provide support and advice to identify remediation actions.
• Support or participate in any activities related to external customer audits and inquiries on our information security or cybersecurity practices.
• Develop and implement continuous monitoring activities