Senior Information Security Officer (Copenhagen)

Job summary

This role involves shaping and enhancing information security within a large European organization, focusing on governance, risk management, and assurance activities. The position reports to the Director for Global IT Services & Cybersecurity and requires collaboration with senior leaders and various business functions across Europe.

Qualifications

• Proven enthusiasm for information security and a commitment to continuous learning in the evolving threat landscape.
• Extensive hands-on experience in information security, governance, risk management, or security assurance within a large organization.
• Familiarity with ISO 27000 standards and NIST Cybersecurity Framework, with a track record of developing effective policies and controls.
• Experience conducting security risk assessments and managing supplier security.
• Strong technical understanding to engage with specialists and connect various cybersecurity perspectives.
• Excellent written and verbal communication skills in English; knowledge of a Scandinavian language is a plus.
• Ability to work confidently with senior stakeholders and provide clear, constructive advice.
• Structured, analytical, and pragmatic approach with attention to detail.
• Self-driven with the capability to manage complex assignments independently.

Responsibilities

• Develop and maintain the information security governance model, control framework, and policies.
• Coordinate the information security risk lifecycle, including assessments and reporting.
• Lead security assessments of suppliers and services, documenting risks and tracking remediation.
• Conduct security assurance reviews to evaluate control effectiveness.
• Advise on information security risks and safeguards.
• Define security requirements for identity access, cloud services, and sensitive information.
• Create security awareness activities and measure their effectiveness.
• Establish security metrics and prepare reports for senior management.
• Collaborate with IT, Compliance, Legal, and Procurement to ensure security requirements are met.

Education

• Relevant education or equivalent practical experience is expected. Certifications like CISSP, CISM, or CRISC are advantageous but not mandatory.

Tools

• Familiarity with security frameworks and risk management tools is beneficial.