Senior Information Security Officer (Copenhagen)

Job summary

This role involves shaping information security within a large European organization, focusing on governance, risk management, and assurance activities. The Senior Information Security Officer will work closely with the CISO and engage with various stakeholders across Europe to embed security into business processes and technology decisions.

Qualifications

• Genuine enthusiasm for information security and a commitment to continuous learning.
• Substantial hands-on experience in information security, governance, risk management, or security assurance in large organizations.
• Practical knowledge of ISO 27000 and NIST Cybersecurity Framework.
• Experience with security risk assessments and supplier security.
• Strong written and verbal communication skills in English; knowledge of a Scandinavian language is advantageous.
• Ability to engage with senior stakeholders and provide informed advice.
• Structured, analytical, and pragmatic approach with attention to detail.
• Self-driven with the ability to manage complex assignments independently.

Responsibilities

• Develop and maintain information security governance models, policies, and standards.
• Coordinate the information security risk lifecycle, including assessments and reporting.
• Lead security assessments of suppliers and services, documenting risks and tracking remediation.
• Plan and conduct security assurance reviews to evaluate control effectiveness.
• Advise on information security risks and safeguards.
• Define security requirements for various domains including cloud services and sensitive information.
• Develop security awareness activities and measure their effectiveness.
• Establish security metrics and prepare reports for senior management.
• Collaborate with IT, Compliance, and business owners to ensure security requirements are understood and acted upon.

Education

Relevant education or equivalent practical experience is expected. Certifications such as CISSP, CISM, or CRISC are beneficial but not essential.

Tools

Experience with security frameworks and risk management tools is expected.