IT Security

At Schibsted, cybersecurity is about more than protecting systems and applications. It's also about protecting journalism, the people behind it, and the technology that makes independent news accessible to millions of people.

We're looking for an IT Security Engineer to join our cybersecurity team, preferably in Oslo or Stockholm. We may also consider candidates based in Krakow. This is an opportunity for an experienced security engineer who enjoys hands-on technical work, solving problems across different environments, and working with others to make systems more secure.

Schibsted is one of the leading media groups in the Nordics, home to well-known news brands including Aftonbladet, Svenska Dagbladet, VG and Aftenposten. Every day, millions of people turn to our news organisations to stay informed, understand the world around them, and access independent journalism.

Behind these brands is a large and diverse technology organisation, building and maintaining the digital products, platforms and infrastructure that make all of this possible.

And with that comes an interesting security challenge.

Our news brands are highly visible, and the threats we face go beyond those of a typical corporate environment. From protecting systems and sensitive information to safeguarding journalists and ensuring uninterrupted access to news, cybersecurity plays an important role in keeping our journalism accessible and independent.

That's where you come in.

As an IT Security Engineer, you'll help strengthen the security of the infrastructure, systems and devices that our organisation relies on every day. You'll analyse risks, design and implement security solutions, and maintain the controls that protect our systems and data.

You'll be part of a cybersecurity team working across Sweden and Norway. As part of the technology organisation, the team works closely with colleagues responsible for infrastructure, networks, user devices and collaboration tools, as well as journalists and editors. A big part of your job will be working with security technologies. But putting a tool in place is only the beginning. You'll also make sure those tools work effectively in practice: reviewing how they're configured, investigating potential threats, and helping teams address weaknesses before they become bigger problems.

• Assess our existing security controls, identify areas for improvement and implement practical ways to reduce risk.
• Improve, deploy and maintain security solutions, including firewalls, intrusion detection and prevention systems, VPNs and endpoint protection.
• Monitor network traffic and security logs, investigate potential threats and respond to incidents to minimise their impact on operations.
• Carry out security audits and assessments to identify and address weaknesses in our systems and networks.
• Define security procedures for working with vendors and third-party providers.
• Develop and maintain security policies, standards, procedures and guidelines in line with regulatory requirements and industry standards.
• Work with external auditors and regulatory bodies on security audits and assessments.
• Guide and mentor junior colleagues, share knowledge and contribute to security training and education programmes.

Who we're looking for

You're an experienced IT security professional who enjoys understanding how systems work, where they might be vulnerable and what it takes to protect them. You're comfortable working hands-on with security tools, but you also know that effective security depends on clear communication and collaboration.

You might come from a dedicated security engineering role or have built your security expertise on a background in network and system administration. What matters is your practical experience implementing security controls and your ability to turn technical findings into improvements that work.

• At least three years of experience in IT security roles, including hands-on implementation of security controls and technologies.
• A strong grounding in endpoint, network and / or infrastructure security.
• A practical experience using tools such as Security Information and Event Management (SIEM), data loss prevention (DLP) and vulnerability scanners.
• A good understanding of networking protocols, operating systems and cloud computing platforms, and the ability to investigate and troubleshoot security-related issues.
• An analytical approach to problem-solving and the ability to prioritise when several tasks need your attention.
• The ability to explain technical concepts clearly and work effectively with both technical and non-technical colleagues.

Relevant certifications such as CISSP or CISM are also valuable, as is an understanding of the particular security challenges facing a media organisation, but neither is a requirement.

We're looking for someone who's proactive, collaborative and willing to share what they know. Someone who doesn't just want to identify security problems, but enjoys working with others to solve them and strengthen how we work.

Work that matters. The technology you help protect supports independent journalism and news organisations that play an important role in society.

Interesting security challenges. You'll work across a diverse technology landscape, protecting infrastructure, systems and devices with different security needs.

An opportunity to develop your expertise. You'll combine security engineering, incident response and risk reduction, working with cybersecurity colleagues and technology teams across the organisation.

A role that combines technology and people. You'll get to dive into technical security challenges while building relationships and helping colleagues put effective security measures into practice.

Room to make an impact. You'll contribute to the security solutions, processes and standards we build, while sharing your experience and supporting the development of junior colleagues.

If this sounds like the kind of challenge you'd enjoy, we'd love to hear from you.

Please reach out to our recruitment partner, Amanda.kjaernes@keystones.no, if you have any question about the role.