Senior Information Security and Data Protection Specialist, Region Skåne Call-Off 2687

Role Summary

Our client is seeking a solution-oriented Senior Information Security and Data Protection Specialist for a consulting assignment within a major development program. The program is developing future information and service platforms, initially with a focus on Microsoft Azure, and aims to establish a sustainable information security and data protection culture across the organization.

The specialist will serve as a central expert across one or more parallel, cross-functional projects. The role operates at the intersection of law, organizational requirements, and technology, supporting the development of secure AI solutions, data platforms, and infrastructure used for sensitive information, including health data.

Key Responsibilities

• Define requirements for protective controls and technical designs from information security and data protection perspectives.
• Work with cross-functional teams to develop solutions that satisfy internal policies and external legal or regulatory requirements.
• Lead information classification and security risk assessment activities across the program.
• Independently prepare Data Protection Impact Assessments (DPIAs).
• Develop modular approaches to risk assessments and security measures so that similar information hosted on shared or comparable infrastructure can be assessed efficiently and consistently.
• Improve the throughput and quality of risk assessments for AI and data platforms.
• Drive continuous improvement within information security and data protection.
• Continuously review existing processes and technical solutions and recommend measures that strengthen security and privacy.
• Provide security advice and translate between operational needs, legal obligations, and technical possibilities.
• Evaluate legal and privacy considerations in relation to advanced AI and data-management capabilities.

Technical Stack & Requirements

• Cloud platform: Microsoft Azure is the initial platform focus.
• Security practices: Information classification, information and IT security risk assessment, risk treatment, security advisory services, and continuous security improvement.
• Privacy practices: Data protection analysis and independent preparation of DPIAs.
• Design principles: Practical knowledge of Security by Design and Privacy by Design.
• Technical domains: Experience involving AI-driven solutions, data lakes, data platforms, or health-data environments is advantageous.
• Cybersecurity domains: Knowledge of cybersecurity within IT, medical technology (MT), or operational technology (OT) is advantageous.

Qualifications & Experience

Candidates must have practical experience with information security and data protection in public administration and be familiar with the ISO 27000 series. Strong knowledge of applicable legislation is required, including the General Data Protection Regulation (GDPR), the NIS2 Directive, and relevant Swedish legislation affecting personal-data processing, such as the Public Access to Information and Secrecy Act and the Patient Data Act.

The assignment requires documented practical experience in assessing and managing information and IT security risks. A relevant education focused on information security and data protection, or equivalent documented professional experience, is required. Documented program or project experience involving information security and data protection is advantageous, as is previous participation in projects involving AI-driven solutions, data lakes, and health-data platforms.

The successful specialist will demonstrate sound judgment and the ability to make well-founded assessments and priorities when analyzing complex issues. The role also requires an ability to collaborate with experts, identify alternative approaches, and balance legal considerations with opportunities presented by advanced AI and data-management technologies.

Work Logistics & Location

This is a consulting assignment supporting Region Skåne within a public-sector development program. The specialist may contribute to one or more parallel cross-functional projects. The specific work arrangement, office location, assignment duration, and remote-work conditions are not stated.