Postdoctoral in Security Policies and Access Control for Multilateral Health Care Environments

Gjøvik, Norway
07 Feb 2019
End of advertisement period
15 May 2019
Contract Type
Full Time

About the position

This postdoctoral researcher position is associated with the Department of Information Security and Communication Technology (IIK) at NTNU Gjøvik. For more information about the department please refer see The researcher will be part of a research group on eHealth and Welfare Security group of the Center for Cyber and Information Security (CCIS) at the department. The postdoctoral researcher position will be under the main supervision of Professor Stephen Wolthusen and co-supervised by Associate Professor Bian Yang.

The position will be funded by the Norwegian Research Council through the IKTPLUSS project Reinforcing the Health Data Infrastructure in Mobility and Assurance through Data Democratization (HealthDemocratization) and will concentrate on the modelling and realisation of formal computational security and privacy policies for medical data and their trustworthy enforcement in a distributed environment. This will also allow the study of how these objectives can be achieved in environments that are only partially trusted. The researcher holding this position will closely cooperate with other researchers and Ph.D. candidates within the HealthDemocratization project towards project goal of establishing a trusted and incentive layer in the future national health data infrastructure.

The position reports to the Head of department.

Job description

An increasing amount of health data is created on and by citizens and patients. These health data resources provide a cornerstone of the vision of Precision/P4 medicine. Sharing health data creates values for clinical care as well as healthcare research. Health data likewise has great value for commercial parties such as the pharmaceutical industry, data analytics providers, and insurance companies. It is hence crucial to protect and promote the interests of individuals and their ability to monitor and control data usage. Individuals should be able to control and share their health data according to their own interests, including monitoring of health status, research participation, and clinical use. However, a democratically acceptable data management system must also allow various other parties (health care service providers, researchers, Internet companies, insurance companies, etc.) to negotiate their benefits, rights and obligations to the health data, and facilitate data provenance and rights management across parties in a trusted manner.

The postdoctoral researcher will study models and algorithms for the formulation of formal, executable policies allowing distributed representation of dynamic objectives for security and privacy in a multilateral, non-hierarchical environment. This will require the mapping or creation of suitable ontological representations of the medical data domain and processes within the domain. The research will seek means for distributed representation and algorithmic reasoning over policies and domain representation also allowing to express rights and trust relationships, extended to allow for reconciliation of multiple policy originators.

A further area of study will be the algorithmic realisation of both reasoning and enforcement of policy decisions in environments where not all participating nodes are trustworthy, tolerating a subset of non-trustworthy or non-compliant entities and characterising limitations that arise from the existence of such entities. A core element of the enforcement model is also to retain the ability to document compliance and auditability under such constraints. The candidate will be expected to document research results in the form of reports and research publications as well as to interact and collaborate with other researchers and project partners.

Qualification requirements

Postdoctoral fellow:

A postdoctoral research fellowships is a qualification position in which the main objective is qualification for work in academic positions. Completion of a Norwegian doctoral degree in Computer Science, Mathematics, or closely related discipline.

The appointment is to be made in accordance with the regulations in force concerning State Employees and Civil Servants and national guidelines for appointment as PhD, postdoctor and research assistant

Other requirements:

  • Knowledge of distributed systems models is desirable
  • Knowledge of formal security models is highly desirable
  • Motivation to work as an active member of an inter-disciplinary project
  • Documented research experience and publication record
  • Domain-related knowledge would be advantageous.

Emphasis will also be placed on:

  • Academic track record

Candidates from non-English speaking countries outside the Nordic countries must provide official documentation of their English competence. Approved tests and results are:

  • TOEFL: 600 / writing 4.5 (paper-based test), 92 / writing 22 (internet- based test)
  • IELTS: 6.5, with no section lower than 5.5 (only Academic IELTS tests accepted)
  • Cambridge Certificate in Advanced English (CAE) or Cambridge Certificate of Proficiency in English (CPE): grade A or B

Personal characteristics

  • Communication abilities
  • Motivation and personal aptitude

In the evaluation of which candidate is best qualified, emphasis will be placed on education, experience and personal suitability, as well as motivation, in terms of the qualification requirements specified in the advertisement

We offer

Salary and conditions


Postdoctoral candidates are remunerated in code 1352, and are normally remunerated at gross from NOK 515 200 before tax per year. From the salary, 2% is deducted as a contribution to the Norwegian Public Service Pension Fund.

The period of employment is 2 years.  

Appointment takes place on the terms that apply to State employees at any time, and after the appointment you must assume that there may be changes in the area of work.

General information

Working at NTNU

A good work environment is characterized by diversity. We encourage qualified candidates to apply, regardless of their gender, functional capacity or cultural background. Under the Freedom of Information Act (offentleglova), information about the applicant may be made public even if the applicant has requested not to have their name entered on the list of applicants.

For further information about the position: Professor Stephen Wolthusen,

For enquires regarding the application procedure: HR Consultant Signe J. Talukder,

About the application:

Publications and other academic works that the applicant would like to be considered in the evaluation must accompany the application. Joint works will be considered. If it is difficult to identify the individual applicant's contribution to joint works, the applicant must include a brief description of his or her contribution.

Please submit your application electronically via with your CV, diplomas and certificates. Applicants invited for interview must include certified copies of transcripts and reference letters.

Please refer to the application number 2019/5066 when applying.

Candidates from universities outside Norway are requested to send a Diploma Supplement or similar official document, which describes in detail the study and grade system and the rights for further studies associated with the obtained degree:

In addition, the following pdf's must be attached:

  • A 1-page cover letter explaining your motivation for this position, and how your skills and experience relate to the research project.
  • A 2-page summary explaining the relevance of your methodological knowledge to the research problem and research questions.
  • A 2-page description of your previous work and academic interests
  • A 2-page draft research proposal outlining a possible approach
  • Contact information of 2 referees, usually including academic supervisor(s)

Application deadline: 15th May 2019

NTNU - knowledge for a better world

The Norwegian University of Science and Technology (NTNU) creates knowledge for a better world and solutions that can change everyday life.

Faculty of Information Technology and Electrical Engineering

The Faculty of Information Technology and Electrical Engineering is Norway’s largest university environment in ICT, electrical engineering and mathematical sciences. Our aim is to contribute to a smart, secure and sustainable future. We emphasize high international quality in research, education, innovation, dissemination and outreach. The Faculty consists of seven departments and the Faculty Administration.

Deadline 15.05.2019
Employer NTNU - Norwegian University of Science and Technology
Municipality Gjøvik Trondheim
Scope Fulltime
Duration Temporary
Place of service Gjøvik