Information Security & Compliance Manager

Job summary

The role involves leading the information security and governance, risk, and compliance (GRC) function, focusing on building a scalable program from the ground up. The position requires collaboration with compliance, engineering teams, and customer security teams to ensure robust security practices and compliance with relevant regulations.

Qualifications

• 3-6 years of experience in information security, GRC, or IT compliance, with at least one ISO 27001 implementation or certification cycle.
• Hands-on experience with compliance automation platforms such as Vanta, Drata, or Secureframe.
• Solid technical literacy to discuss cloud security controls and evaluate vendor security postures.
• Understanding of the digital compliance landscape, including GDPR, NIS2, and the Cyber Resilience Act.
• Strong written English skills; Danish is a plus but not required.

Responsibilities

• Manage the Information Security Management System (ISMS) and ISO 27001 program, including risk assessments and internal audits.
• Administer and enhance the compliance platform, focusing on automation and policy management.
• Handle customer security assurance, including audits and due diligence requests.
• Develop a trust center and reusable assurance package.
• Oversee UK security certifications and support NHS requirements.
• Coordinate IT security operations and incident response processes.
• Prepare for upcoming regulations and maintain the security risk register.

Skills

• Strong understanding of compliance automation and security frameworks.
• Ability to work independently and manage ambiguity.

Education

• Relevant degree or equivalent experience in information security or compliance-related fields.

Tools

• Familiarity with compliance automation tools (e.g., Vanta) and security management systems.