Join Our Team VIPAS AB as a Cybersecurity Risk & Assurance Manager

Do you have what it takes to thrive in the vibrant world of IT consulting? VIPAS AB, a burgeoning company, proudly invites you to embark on your next engaging project as our
About VIPAS :
Imagine a world where your business technology perfectly aligns with your goals—efficient, scalable, and innovative. At VIPAS AB, that’s exactly what we strive to create. As an IT consulting company, we don’t just offer services; we deliver tailored solutions using cutting-edge technologies like Java and Python. Our team is well-versed in software development, Dev Ops, and engineering, bringing years of experience and expertise. Think of us as your trusted guide, leading your organization through the landscape of modern tech adoption, ensuring every step is taken with confidence and foresight.
Job Description:
We are seeking an experienced Cybersecurity Risk & Quality Assurance Manager on a temporary consulting basis to ensure comprehensive cybersecurity risk management and quality assurance processes. The consultant will oversee and maintain the Bank’s security control framework, manage quality assurance practices, and continuously improve cybersecurity controls to address evolving threats.
Key Responsibilities:

• Cybersecurity Risk Management: Integrate cybersecurity risk management into the Enterprise Risk Management (ERM) framework, ensuring risks are identified, assessed, and mitigated.
• Security Control Framework: Oversee and maintain the Security Control Framework aligned with industry standards (e.g., NIST CSF, CIS Controls) to address risks and ensure effective security controls.
• Threat Catalogue Management: Regularly update and manage the Threat Catalogue to account for evolving threats, guiding mitigation strategies.
• Quality Assurance: Define and drive a robust cybersecurity quality assurance program, including penetration testing, red team exercises, vulnerability scanning, and control testing, ensuring operational effectiveness.
• Continuous Improvement: Drive a cybersecurity continuous improvement program to adapt and enhance controls in response to emerging threats, audit findings, and business needs.
• Regulatory Compliance: Ensure cybersecurity practices comply with regulatory requirements and support regulatory audits, reporting on compliance status.
• Cybersecurity Reporting: Develop and report on Key Performance Indicators (KPIs), Key Risk Indicators (KRIs), and cybersecurity maturity assessments to measure effectiveness and guide decision-making.

Requirements:

• Minimum 5 years of experience in cybersecurity risk management, security control frameworks, and quality assurance.
• Expertise in overseeing and maintaining security frameworks (e.g., NIST CSF, CIS Controls) and conducting internal control testing, audits, and vulnerability assessments.
• Strong capability in driving continuous improvement programs and ensuring operational effectiveness of cybersecurity controls.
• Relevant certifications (CISSP, CISM, CRISC) and fluency in Swedish and English are essential.
• Experience with hybrid environments (on-premise, cloud) and knowledge of Lean-Agile or Dev Sec Ops methodologies.

Why Join Us?Vipas AB offers attractive employment packages for IT consultants, aligned with the Teknikföretagen (Almega) collective agreement. Clients Working with us provides opportunities in diverse industries, allowing you flexibility and growth. If you’re driven and eager to face new challenges, join the VIPAS family.
You'll be part of an innovative team driving the future of telecom, Automotive, Retail, and Banking. If you're ready to take on challenging projects and grow your career in a cutting-edge environment, this is the opportunity for you!
Apply Now & Please feel free to reach me at - sandhya@vipas.se
Note: Please do apply if you have Sweden PR/ citizenship OR a Sweden work permit.

How to Apply:
Interested candidates are encouraged to apply by submitting their resume and cover letter. Join us in driving innovation in the VIPAS AB!

Please note! We offer continuously. That means that we sometimes remove the assignments before the deadline. If you are interested we recommend that you apply immediately.