Anders Eriksson Email & Phone Number

A very experienced and engaged security professional with a long and solid experience working with security in IT and administrative processes from various perspectives. Focused on Information Security the last 20 years with skills and experiences corresponding to CISM in many areas. Being a very analytic and thorough person acting in a wide area of security, also with more deep technical skills/understanding in many areas. Having easy to understand the “big picture”, (incl. potential business/user consequences based on security requirements and limitations), with critical thinking and a problem-solving approach.Always striving for the "correct" risk-based security measures, in everything from creating requirement documentation, guidelines, and best-practices to drive and support proper security design implementations and reviewing security conditions in IT solutions and business implementations to verify security compliance.Acting according to a “Dare, Care & Simplify” approach, incl. taking initiatives and bringing up concerns or problems that should be considered or corrected.Some skills and experiences from the last positions at Telia Company• Trusted security advisor for security design (development and improvements) based on legislative/regulative/customer/company security requirements.• Acting as support and “security helpdesk” for implementing “correct” security measures based on requirements and environment-specific conditions.• Security design review (security compliance verification of systems/applications/services).• Experience from working under ISO 27001.• Creating/updating/reviewing Security Standards/Instructions/Guidelines/Best-Practices, including security awareness publications.• Monitoring service security conditions, and creating security design recommendations, for security topics in internal forums and contexts.• Creating and updating “data handling security guidelines” based on Information Security Classification, as service data protection specifications and user guidelines.• Risk assessment, Business Impact assessment, Risk Management (mainly “bottom up” risks)• Focus areas (and passions) : - “Workplace security” (Endpoint computing, mobile device, collaboration services, end-user application security, Microsoft 365 service security conditions etc.) - Identity and Access Management (IAM), HR to IdM/IGA identity flow, user/system authentication and authorisation conditions etc. - Writing and verifying security documentation - End-User, and target oriented, security awareness