Senior GRC Specialist (On-site, Denmark)

Job summary

The role focuses on managing human-related security risks within a Governance, Risk & Compliance (GRC) framework. The Senior GRC Specialist will drive initiatives to identify, assess, and mitigate security vulnerabilities influenced by human behavior, ensuring effective security practices are embedded in daily operations.

Qualifications

• Experience in Information Security, Security Governance, or Security Risk Management.
• Background in Human Risk Management, Security Behavior, or Security Awareness.
• Familiarity with GRC, Audit, Compliance, or Regulatory Assurance.
• Knowledge of ISMS and ISO 27001-based environments.
• Experience in critical infrastructure or highly regulated sectors.

Responsibilities

• Lead the identification and management of human-related security risks within the security risk management framework.
• Develop risk-based communications and awareness initiatives to enhance control effectiveness.
• Create and maintain metrics and reporting on human-related security risks and control effectiveness.
• Advise stakeholders on the influence of human factors on security risk.
• Facilitate workshops to promote risk-informed decision-making.
• Integrate human-risk considerations into security governance and compliance processes.

Skills

• Strong understanding of how human behavior impacts security outcomes.
• Ability to influence stakeholders without formal authority.
• Excellent communication skills for conveying complex topics clearly.
• Strategic thinking combined with practical execution capabilities.

Education

• Relevant degree or equivalent experience in a related field is preferred.

Tools

• Familiarity with security governance frameworks and risk management tools.