Would you like to be part of building a global IT function where we together find the way forward? Toca Boca and its sister studios are growing and the IT function needs to keep up.

As our Cybersecurity Analyst your focus will be safeguarding our digital infrastructure and protecting against emerging cyber threats. As a key player in our cybersecurity team, you will be instrumental in securing our networks, systems, and data, ensuring that we maintain the highest level of security across all areas of our business.

What you’ll be doing

As a Cybersecurity Analyst, you’ll play a key role in protecting the organization’s digital assets. You’ll monitor and analyze security alerts from firewalls, IDS/IPS, and XDR platforms to detect and respond to potential threats.

Your tasks will include performing incident response activities—such as containment, eradication, and recovery—while working closely with senior analysts. You’ll conduct vulnerability assessments and penetration tests, reporting risks and findings to stakeholders.

You’ll also configure and maintain security tools like SIEM, firewalls, and endpoint protection. When investigating security breaches, you’ll document findings and recommend remediation strategies.

In addition, you’ll support implementing security controls in line with industry regulations (e.g., GDPR, HIPAA, PCI DSS) and contribute to employee security awareness training.

Staying updated on the latest cyber threats, you’ll propose proactive security enhancements to keep the organization secure against evolving risks.
Is this you?

In-depth knowledge of cybersecurity principles including Zero Trust, IDS/IPS, XDR, and threat intelligence.

Proficiency in networking (TCP/IP, routing, switching, and network security protocols).

Hands-on experience with security technologies such as firewalls, VPNs, SIEM, and endpoint security solutions.

Strong analytical skills for investigating incidents and identifying root causes.

Excellent problem-solving and communication abilities to convey technical findings to both technical and non-technical audiences.

Familiarity with vulnerability assessment tools and ethical hacking methodologies.

Experience with compliance standards (e.g., GDPR, HIPAA) and ensuring regulatory adherence.

Experience using ticketing systems (e.g., Service Now) for managing and documenting security events.

This is us!

Toca Boca captures the spirit of play. We create digital toys and everyday products that are filled with fun and silliness that kids from any corner of the world can instantly relate to. Everything is designed from their perspective. We celebrate the diversity and quirkiness of their world and give them the freedom to play in ways that only they can.

Good to know!

This position is full time and based in our Stockholm office with a hybrid working model (part office, part working from home). We apply a 6 month probationary period. You should already be located in Sweden, as we will not be able to offer relocation for this position. As we’re an international company, with over 20 nationalities working here, and millions of users all over the world, you have to be fluent in English. Your application should therefore be in English.

Toca Boca develops digital games that capture the power of play and that are filled with fun and silliness that kids around the world can instantly relate to. Since our first product launch in 2011, we have released 46 apps that have been downloaded more than 444 million times the world over, making us the No. 1 mobile-first kids brand in the App Store. Our products focus on sparking kids’ creativity and imagination, creating opportunities for open-ended play.

With offices in Stockholm and San Francisco, Toca Boca is owned by Spin Master Corp., a global children’s entertainment company that creates, designs and manufactures a diversified portfolio of innovative toys, games, products and entertainment properties.