Risk Manager (Information Security, Copenhagen)

Job summary

This role involves managing and developing an Information & Compliance Risk Management Framework within a global consultancy, focusing on cyber and data-related compliance risks. The position is part of the CISO Office and requires collaboration with various teams to ensure effective risk assessments and reporting.

Qualifications

• Proven experience in risk management, information security, compliance, audit, or governance.
• Hands-on experience with risk assessments, risk registers, and structured reporting.
• Familiarity with international standards such as ISO 31000 and ISO 27005.
• Ability to translate complex technical and regulatory inputs into clear risk statements.
• Knowledge of AI Act, Data Act, NIS2, and GDPR is advantageous.

Responsibilities

• Own and maintain the Information & Compliance Risk Management Framework aligned with ISO 31000, ISO 27005, and NIS2.
• Maintain and govern the security and compliance risk register for cyber, information security, and data protection risks.
• Facilitate structured risk assessments and workshops using inputs from various teams.
• Ensure clear risk descriptions, scoring, ownership, and documented treatment or acceptance decisions.
• Prepare consolidated risk reporting for the CISO Office and security governance forums, aligning with Enterprise Risk Management.

Skills

• Strong analytical and communication skills to convey complex risk information clearly.
• Ability to work collaboratively across different teams and functions.

Education

• Relevant degree or equivalent experience in risk management or a related field.

Tools

• Familiarity with risk management software and tools for reporting and assessments.