Head of Cyber Defense Center

Join us on our transformation journey to the digital future
At Group Digital & IT, we have a clear ambition to enable value creation at scale for the Volvo Group. With a new product centric operating model and digital technologies, we will produce digital offerings that are profitable, scalable, and differentiated. With Group Digital & IT, you will be part of a global and diverse team of highly skilled professionals, who learn continuously and embrace change to stay ahead. We have a very important role to play in reaching the Volvo Group ambitions for 2030. Do you want to be part of our transformation journey towards becoming the digital capability of the Group? The time is now.

Mission and context
In this role you will lead the Cyber Defense Center of Volvo Group. The Cyber Defense Center plays a key role in keeping Volvo Group safe against both known and unknown risk by preventing, detecting and minimizing the impact of non-compliance and developing cyber threats.

As the Head of the Cyber Defense Center you will oversee a team that is responsible for undertaking the timely review of security events/incidents generated by security devices and logs, assessment of the situation – using threat intelligence and by analysing artifacts, and possible escalation. It is essential that you will lead and guide the team to stay up to date with emerging cyber risk landscape and continuously improve the planning, and implementation of proceses & controls to quickly resolve incidents and mitigate IT risks across Volvo Group.

The successful candidate reports directly to the Senior Vice President of Enterprise IT Security.

Main Responsibilities

• Plan, direct and develop the strategy and vision of the Cyber Defense Center
• Lead the Cyber Defense Center and all its operations, including a team of security operational staff members and finances (run, change and continuous improvement)
• Ensure the monitoring and analysis of incidents to protect Volvo Group’s assets by addressing all security incidents and ensuring timely escalation to relevant stakeholders
• Drive the implementation of emerging threat intelligence (indicators of compromise, updated rules, etc.) to identify affected systems, assets and the scope of the attack
• Continuously improve the incident management process to ensure timely escalation, having the right amount of information, and evidence base for rapid decision making (e.g. based on forensic analysis)
• Supervise the monitoring and analysis of logs and alerts from a variety of different technologies (SIEM, Firewalls, Proxies, Anti-virus, etc.…), across multiple platforms and supervise the identification of security incidents through ‘threat hunting’
• Use expert knowledge, vendor relationships and community intelligence to review detection patterns to improve the center’s capabilities
• Lead the reviews of previous incidents and incorporate lessons learned into mitigation and response capabilities
• Create reports with meaningful KPIs of the center’s operations for presentation to senior management and stakeholders

Requirements and Qualifications

• A solid technical background based on a degree in Information Technology
• Computer Science, Information Security or similar experience
• 7+ years general experience in information security/ cybersecurity
• 5+ years experience working within a Security Operations Center/Cyber Defense Center and using SIEM technologies

Industry certification/qualification

• GCIA, GIAC, GCIH, CISSP, Ethical Hacker

Are we a good match?
In the Volvo Group, we have defined leadership as a set of observable behaviors that leaders exercise to achieve alignment towards our vision 2030, to better execute our strategy and for the Group to continuously renew itself in order to “Perform and Transform”. To reach our vision and deliver on our strong commitments, we need to pair “the will” with “the skill”. That is why our leadership principles are behavioral based. The principles Lead with Passion, Perform with Purpose and Transform with Vision are our values in action, and they will strengthen our culture.

In your role as Line Manager, we expect you to develop your area of responsibility by having the ability to define the right priorities based on a customer centric mindset. We encourage the ability to drive business forward and act upon opportunities and ideas and transform them into value (financial, cultural, or social) for others. We create an environment where of continuously improvements and learning maximize the outcome of our work.

To achieve our goals, we collaborate within and across teams. We create a sense of unity and trust by nurturing open dialogues and collective work. We build a work environment where diversity in expertise, opinion and culture is valued.

The location for the position is Gothenburg, Sweden.

Union representatives for Swedish applicants:
Akademikerna – Therese Koggdal, +46 470 387855
Unionen - Johan Svedberg, +46 31 3222712
Ledarna – Ulrika Holmberg, +46 31 3225071

We are happy to get your application.

Kindly note that due to GDPR, we will not accept applications via mail. Please use our career site.