Roll | Service Manager |
Kompetensområde | Data/IT |
Startdatum | 2025-10-10 |
Slutdatum | 2025-12-31 |
Omfattning | 100% |
Ort | Stockholm |
Land | Sweden |
Sista svarsdatum | 2025-10-14 (Offerter kommer att behandlas löpande) |
Kontaktperson | Marie Lundin (marie.lundin@keyman.se | 076-1081079) |
Referensnummer | #14012 |
Övergripande uppdragsbeskrivning
NCC is seeking a Service Manager to strengthen our IT Security Operations (SecOps) team. This role will be responsible for managing day-to-day SecOps tasks, coordinating with other Service Managers across Digital Workplace, Cloud, and On-Premises environments, and ensuring smooth delivery of security services.
Clear processes and routines for vulnerability management.
Improved collaboration with other service areas (Digital Workplace, Cloud, On-Premises).
Initiatives and proposals to uplift security posture.
Integration of DevOps practices into security operations.
Regular reporting and updates to stakeholders on SecOps activities, improvements, and compliance.
All text in the offer and CV must be in English.
OBS! Sista dag att offerera är 29/9.
Skallkrav
proven experience in: Leading or managing security operations in medium to large organizations.
proven experience in: Handling vulnerability management, incident management, and log management.
proven experience in: Working with Microsoft security technologies and detection services.
proven experience in: Coordinating with cross-functional teams (Cloud, Digital Workplace, Infrastructure).
proven experience in: Driving initiatives to improve security maturity and posture.
proven experience in: Supporting and implementing compliance requirements within IT SecOps, specifically ISO 27001.
Availability for on-site work at the Herrjärva office, either fully or partially (to be agreed).
Ability to coordinate across multiple teams and manage stakeholders effectively.
Need to have (must): Strong knowledge of Microsoft security ecosystem (Defender suite, Sentinel, Entra ID, etc.).
Need to have (must): Experience with detection and monitoring services (SIEM/SOAR).
Need to have (must): Hands-on experience with vulnerability management processes and tools.
Need to have (must): Knowledge of DevOps concepts and ability to integrate them into SecOps.
Need to have (must): Familiarity with ISO 27001 controls and compliance tasks.
Need to have (must): Excellent coordination, communication, and stakeholder management skills.
Need to have (must): Strong problem-solving and incident management capabilities.
Börkrav
Nice to have: Experience with cloud security in Azure and/or multi-cloud environments.
Nice to have: Familiarity with other regulatory and compliance frameworks (e.g., NIST, GDPR).
Nice to have: Previous experience working with ITIL/Service Management models.
Nice to have: Knowledge of OWASP, secure development practices, or application security.
Nice to have: Experience working in a multinational environment.
Övriga krav
Bifoga CV på engelska i Wordformat under fliken Dokument. CV:t är en viktig del i utvärderingen av konsulten. Det ska tydligt visa att konsulten har den kompetens och erfarenhet som efterfrågas för det aktuella uppdraget.
Offert för detta uppdrag måste skickas in via KeySourcingTool. Svar via mail kommer att få begränsad feedback.
Leverantören intygar att konsult- och ansvarsförsäkring finns som täcker denna typ av uppdrag enligt branschstandard.
Kommentarena till de olika kraven i offerten är en viktig del i utvärderingen. Var därför noga med att förklara Hur konsulten uppfyller kraven och från vilket/vilka uppdrag eller vilken utbildning.
Hela offerten, motivering, kommentarer till kraven, CV´t och eventuella andra bilagor skall vara på engelska.
Personliga egenskaper
Övrig information
All text in the offer and CV must be in English.