Information Security Specialist

The client is looking for an Information Security Specialist specializing in cloud services to conduct a comprehensive assessment of approximately 30 cloud services.The objective is to establish a complete, consistent, and quality-assured overview of the cloud services, including their ownership, responsibilities, information handling, contractual status, risks, compliance requirements, and supplier dependencies.The assignment will result in a main report and decision-support document for the responsible manager, highlighting the current state, identified risks and gaps, and recommended actions.Key ResponsibilitiesThe consultant will:Inventory and assess approximately 30 cloud servicesAnalyze ownership, responsibilities, and governanceReview contracts, agreements, terms, and supplier arrangementsAssess information handling, classification, retention, archiving, and public recordsReview personal data processing and GDPR/data protection requirementsAssess information security controls and regulatory complianceIdentify supplier dependencies and associated risksReview existing documentation and decision-support materialConduct interviews with relevant stakeholdersConsolidate findings into structured management-level decision materialProduce a comprehensive final report with:Current-state assessmentIdentified risksGaps/non-complianceRecommendationsProposed actionsMandatory SkillsCandidates must demonstrate:4+ years of recent/current experience in information security and information classificationProven experience with cloud service inventory, assessment, and governanceProven experience in data protection and personal data processingProven experience with contract review and supplier/vendor managementExperience conducting stakeholder interviewsAbility to prepare and present decision-support material at management levelSwedish language proficiencyPreferred / Meritorious ExperienceCandidates with the following experience are particularly relevant:Similar cloud-service assessments within a government authority or public-sector organizationAssessment of cloud services concerning:Freedom of information / public accessConfidentiality and secrecyArchiving requirementsThird-country data transfersExperience working with regulatory requirements applicable to Swedish public-sector organizations