Cluster North Digital / Cyber Security Officer - M/F

At Securitas, Digital Security (Cyber Security) is focused on protecting our systems, applications, data, and services while enabling secure and reliable business operations.

All countries within our scope are either certified against ISO/IEC 27001 or actively implementing it, ensuring a consistent and structured approach to information security management across the organisation.

Your Role – Cluster Digital Security Officer (Cluster North)

As a Cluster Digital Security Officer, you will support the technical execution, coordination, and oversight of Digital Security across Cluster North (Sweden, Norway, Finland, Denmark, the UK, and Ireland), while also contributing to Group/ Division-level security priorities.

This is a hands-on, operational role, delivered as part of a wider Digital Security organization. You will work closely with different Division/Group IT teams, Digital Security Operations, Digital Security, and Country IT teams, operating in a collaborative, multi-country and multi-layer (Cluster–Division–Group) environment.

Key Responsibilities

Security Coordination & Team Collaboration (Cluster & Division)

• Coordinate Digital Security activities across the Cluster and support execution of the security roadmap aligned with Division priorities, including application security initiatives

• Ensure consistent implementation of security controls, baselines, and services across infrastructure and applications

• Work closely with GITS, Application teams, Domain and other IT teams to ensure alignment and effective execution

• Contribute actively to the Digital Security community, including sharing practices related to application and platform security

• Provide regular, transparent, and data-driven reporting on risk posture, control effectiveness, and remediation progress

Technical Security Oversight (Infrastructure & Applications)

• Monitor and assess the security posture of platforms, infrastructure, and applications (on-prem and cloud)

• Oversee key control areas including vulnerability management, patching, identity and access management, endpoint security, and application security

• Support secure practices across the application lifecycle (SDLC), including awareness of secure design and common vulnerabilities (e.g. OWASP Top 10)

• Ensure effective logging, monitoring, and incident detection capabilities are in place across infrastructure and applications

• Track and assess third-party and supplier risks, including risks related to applications and integrations

Risk, Compliance & Assurance

• Identify and track gaps against security policies, standards, and mandates, including application security requirements

• Support/execute risk assessments, internal and external audits, and customer assurance activities across Cluster environments

• Drive and follow up on risk remediation plans, ensuring clear ownership and execution across technical teams

Securitas Alarm Monitoring Centers (SOC) Security

In addition to Cluster responsibilities, you will contribute to Division-level security of Securitas Alarm Monitoring Centers (SOCs) supporting the Domain Digital Security Officer SOC and RVS, which are among the most critical environments within Securitas.

This includes:

• Supporting and overseeing the security posture of SOC environments, including underlying infrastructure and supporting applications

• Ensuring implementation of enhanced technical controls (e.g. network segmentation, strong access control, privileged access management, monitoring, and secure application access)

• Monitoring the availability, integrity, and protection of SOC systems, applications, and data flows

• Supporting incident detection, response readiness, and recovery capabilities for SOC-related platforms and applications

• Working closely with Infrastructure, Application, SOC and other IT teams to reduce attack surface and strengthen resilience of SOC environments

Ideal Candidate Profile

We are looking for a candidate who combines technical understanding across infrastructure and applications, structured execution, and strong collaboration skills.

Certifications (mandatory)

• CISSP or CISM or equivalent

Experience & Knowledge

• 5–7 years of experience in Cyber Security, Information Security or Application Security

• Minimum of 2 years of experience in IT operations

• Good understanding of security domains (IAM, endpoint security, vulnerability management, logging/monitoring, network security, and application security)

• Solid understanding of application security principles, including secure development practices, common vulnerabilities (e.g. OWASP Top 10), and risks in application architecture and integrations

• Good understanding of ISO 27001 standard

• Experience with risk management, audits, or compliance activities

• Understanding of infrastructure environments (networks, servers, cloud platforms) and their interaction with applications

Technical & Analytical Skills

• Ability to assess security posture across infrastructure and applications and identify control gaps

• Comfortable working with security metrics, reports, and risk data

• Understanding of incident detection and response processes, including those impacting applications

• Ability to translate security requirements into practical and implementable actions across infrastructure and application teams