Portrait of Niklas Löthstam

Curriculum vitae

Niklas Löthstam

Bachelor of Science in Computer Science and eight years in public administration. Works on supervision against EU regulation and standards.

  • EU regulation and accessibility supervision
  • Privacy, information security and cybersecurity
  • Local AI and language-model infrastructure

My Story

I work where regulation, technology and security meet.

From deciding migration cases to supervising accessibility under EU law, public administration has been my field. Now I'm adding hands-on AI infrastructure and a master's in privacy, information security and cybersecurity, aiming for work in cybersecurity, information security and privacy, including governance, risk and compliance (GRC).

Regulation and compliance

  • Supervision under the European Accessibility Act (LPTT)
  • Supervision against EU regulation and standards
  • EN 301 549 and WCAG

AI and infrastructure

  • Local LLM operation: Ollama, LibreChat, OpenWebUI
  • Evaluation of open models (Gemma, Mistral, gpt-oss)
  • Linux and operations: Fedora, AlmaLinux, Docker, K3s/Kubernetes
  • Self-hosted servers (Hetzner & InterServer); TCP/IP, firewalls and segmentation, DNS

Data and development

  • PostgreSQL, SQL and data modelling (DbSchema, UML)
  • Master data management
  • Python, Java, Flutter and Bash scripting
  • Jira, Confluence, Git, SAP and S/4HANA

Focus area

Cybersecurity, information security and privacy

Experience and certifications

  • Frameworks and regulation: ISO/IEC 27000 series, GDPR, the AI Regulation
  • Compliance supervision against EU regulation and standards
  • Network security basics: TCP/IP, firewalls and segmentation, DNS
  • Cisco Junior Cybersecurity Analyst Career Path
  • Data security and integrity, IT law (Bachelor's coursework)

Studying now · master's 2026–2028

  • Information security management
  • Privacy and data protection
  • Practical cryptology
  • Cybersecurity operations and digital forensics for incident response
  • Cybersecurity for IoT and critical infrastructures

Work experience

Jan 2026 – Present

Officer, accessibility supervision and compliance

Swedish Post and Telecom Authority (PTS)

  • Supervises compliance with the European Accessibility Act (LPTT)

Proof of concept: AI at PTS

  • Technically responsible for setting up and running the local LLM environment
  • Deployed and configured Ollama and LibreChat on a Kubernetes cluster at RISE ICE Datacenter (ingress, resource quotas, image versioning)
  • Benchmarks and evaluates open language models for Swedish-language supervision and review tasks: answer quality, response time, resource use and token consumption

Aug 2024 – Jan 2026

Master Data and Jira Development

SCA Forest Products AB

  • Master data quality and Jira optimisation within the development team

Sep 2016 – Feb 2024

Case Officer

Swedish Migration Agency

Legal compliance and application processing

  • Processed applications and made independent decisions in work permit, EEA (EU residence permit), family reunification and student cases
  • Applied migration law, administrative law and EU legislation

Project team member

  • EU statistics regulation (Sep 2022 – Feb 2024): identified and developed process improvements; created a user guide in Infocaption for the Wilma case management system
  • Project eDar, 10% (Jul – Dec 2019): produced internal and external information for communication across channels, including to foreign authorities, around major changes to the Agency's eServices
  • Project vidar, 10% (Jan 2018 – Jul 2019): further development of the Agency's IT support systems in the permit process; testing, evaluation, feedback and planning

Education

Sep 2026 – Jun 2028

Master's Programme in Privacy, Information and Cybersecurity

University of Skövde · Master's degree, 120 credits (högskolepoäng) · Distance, taught in English

Courses in the programme
  • Cybersecurity OperationsG1F · 7.5 credits
  • Principles of Privacy, Information Security and CybersecurityA1N · 7.5 credits
  • Practical CryptologyA1N · 7.5 credits
  • PrivacyA1N · 7.5 credits
  • Information Security ManagementA1N · 7.5 credits
  • Cybersecurity for Internet of Things and Critical InfrastructuresA1N · 7.5 credits
  • Project in Privacy, Information Security and CybersecurityA1F · 15 credits
  • Optional course7.5 credits
  • Optional course7.5 credits
  • Information Security Management – ResearchA1F · 7.5 credits
  • Digital Forensics for Incident ResponseA1F · 7.5 credits
  • Master Degree Project in Informatics with a specialization in Privacy, Information Security and CybersecurityA2E · 30 credits

Awarded 2026

Bachelor of Science (filosofie kandidat), major in Computer Science

Mid Sweden University

Degree project, 15 credits, passed with distinction (VG)“DAMHEAP != offentlig_förvaltning: AI-styrning i svenska kommuner och statliga myndigheter” (AI governance in Swedish municipalities and government agencies) Read the thesis in DiVA

Relevant coursework
  • Introduction to Information Systems and eServices
  • Sociology BA (A), Leadership and Organizational Development
  • eServices - Perspectives and Evaluation
  • Design of eServices - Undergraduate Level
  • Human-Computer Interaction for eServices
  • Communication, Group Dynamics and eServices
  • Application Development for Mobile Android Devices I
  • Introductory Programming in Python
  • Introduction to App Development with Flutter
  • IT Law
  • E-society: e-governance and e-services
  • Digital Experience Design
  • Computer Science BA (C), Scientific Method
  • Computer Science BA (C), Degree Project
  • Computer Science BA (A), Database Systems
  • Computer Science BA (A), Programming Methods I with Java
  • Computer Science BA (B), Software Engineering
  • Web Publishing
  • Hard Infrastructure
  • Data Security and Integrity

The full CV (PDF) is available on request by email or via LinkedIn.

Certifications and languages

  • Cisco · Junior Cybersecurity Analyst Career Path
  • Cisco · Networking Essentials
  • Swedish · native
  • English · very good

Contact

Get in touch by email or on LinkedIn.