Senior Information Security Officer (Copenhagen)

Job summary

This position involves shaping and enhancing information security within a large European organization. The Senior Information Security Officer will work closely with the Director for Global IT Services & Cybersecurity, engaging with senior leaders and technology teams across Europe to implement effective security governance and risk management practices.

Qualifications

• Strong enthusiasm for information security and a commitment to continuous learning.
• Significant hands-on experience in information security, governance, risk management, or security assurance in large organizations.
• Practical knowledge of ISO 27000 standards and NIST Cybersecurity Framework.
• Experience in conducting security risk assessments and managing supplier security.
• Technical understanding to engage with cybersecurity specialists and connect various perspectives.
• Excellent written and verbal communication skills in English; proficiency in a Scandinavian language is advantageous.
• Ability to work confidently with senior stakeholders and provide clear, constructive advice.
• Structured, analytical, and pragmatic approach with attention to detail.
• Self-driven with the capability to manage complex assignments independently.

Responsibilities

• Develop and maintain the information security governance model, policies, and control frameworks.
• Coordinate the information security risk lifecycle, including assessments and reporting.
• Lead security assessments of suppliers and services, documenting risks and tracking remediation.
• Conduct security assurance reviews to evaluate the effectiveness of controls.
• Advise on information security risks and safeguards.
• Define security requirements for various domains, including cloud services and sensitive information.
• Create security awareness activities and measure their effectiveness.
• Establish security metrics and prepare reports for senior management.
• Collaborate with IT, Compliance, Legal, and Procurement to ensure security requirements are understood and acted upon.

Education

• Relevant education or equivalent practical experience is expected. Certifications such as CISSP, CISM, or CRISC are beneficial but not mandatory.

Tools

• Familiarity with security governance, risk management, and compliance tools is advantageous.