Architecture & Evolution: Define and evolve the security architecture, ensuring alignment with customer needs, regulatory requirements, and internal security guidelines and policies.
Security Integration: Embed security throughout the entire software development lifecycle (SDLC), guiding architects, leads, and DevOps teams in secure-by-design principles and cloud-native security best practices.
Risk Management: Identify, assess, and manage vulnerabilities and risks; drive mitigation actions and ensure security controls meet customer expectations and applicable standards.
Strategic Collaboration: Collaborate closely with the central Cybersecurity team, solution architects, and other stakeholders.
Technical Evaluation: Evaluate technologies and third-party solutions; lead design reviews with a strong focus on threat modeling, secure architecture, and long-term maintainability.
Resilience & Audits: Support continuous improvements in detection, incident response, and overall resilience; support security assessments, reviews, and internal or external audits.
Future Planning: Contribute to roadmaps and long-term technical direction, ensuring security considerations are built into future architecture and platform evolution.

Proactive Leader: A collaborative professional with a proven background as a Security Architect, ideally in cloud-native environments (AWS) with the ability to work across multi-cloud setups (Azure).
Effective Communicator: You possess excellent communication skills and can make security clear and understandable across teams. You naturally lead, guide, and influence others while taking initiative to move projects forward.
Strategic & Technical: You combine strategic thinking with hands-on ability, working comfortably with risk assessments, threat modeling, and secure design.
Structured Documentation: Your documentation of risks, decisions, and designs is clear and communicates the rationale behind your recommendations.
Global Coach: You adapt your leadership style to coach and support DevOps teams across multiple global sites, fostering trust, clarity, and shared responsibility for security.

Frameworks & Practices: Solid understanding of secure development practices (SDLC) and familiarity with frameworks such as ISO 27001 and NIST 800-53.
Cloud Security: Strong experience designing and securing cloud-based backend environments (specifically AWS) with expertise in IAM, networking, monitoring, and cloud-native security controls.
DevSecOps: Practical experience with tools and practices such as SAST, SCA, dependency scanning, secrets scanning, and Infrastructure-as-Code (IaC) security.
Specialized Knowledge: Familiarity with connected services, PKI (onboarding/offboarding), UNECE R155, and large-scale distributed systems is a plus.

Security Architect

Göteborg