Business Security & Data Privacy Officer

Orange; København; On-site; DKK 900,000 - 1,200,000; Full time

Job summary

Orange Cyberdefense is seeking a Business Security & Data Privacy Officer to join the Global Security Department. You will balance data privacy with business security, collaborating across the organization to ensure compliant offers to clients and reliable supplier practices.

You will lead and advise without management responsibilities, defining internal security and privacy frameworks, handling data subject requests, and supporting audits and DPIAs.

Qualifications

• Bachelor's degree in a relevant field (information security, risk management, privacy, compliance).
• Minimum 5 years of relevant experience in information security, risk, privacy or compliance.
• Strong knowledge of GDPR, DORA, NIS2, ISO 27001 and SOC 2.
• Experience with GRC tools, dashboards, compliance reporting and control monitoring.
• Ability to drive processes and cross‑functional initiatives.
• Strong written and verbal communication skills.

Responsibilities

• Advise and support the Cyber with Business unit on data privacy and security topics.
• Define and maintain the internal Security and Privacy framework.
• Act as a point of contact for data subject requests.
• Analyze, investigate, audit, and monitor processing activities for compliance.
• Provide DPIA/PIA advice and verify implementation.
• Participate in awareness and promote a Data Protection and Privacy culture.
• Define and maintain Generic Security Assurance Plans and certification for products/services.
• Maintain procedures for client audits on information security and data protection commitments.
• Support the execution of internal and external audits.
• Assist legal, sales, and pre‑sales teams with contractual security requirements.

Skills

Strong execution capability

Procedures definition & improvement

Communication & stakeholder management

Structured, pragmatic, solution‑or‑or

Ownership & follow‑through

Delivery‑focused mindset

Education

Bachelor's degree or equivalent in Information Security, Risk Management, Privacy, Compliance or related field

5+ years of relevant experience

ISO 27001 Lead Auditor/Implementer

ISO 27035 Risk Manager/Lead Risk Manager

ISO 27701 Lead Implementer/Auditor

CISSP, CISM, CISA, CRISC certifications

Job description

We are looking for a Business Security & Data Privacy Officer to join the Global Security Department within Orange Cyberdefense. This is a great opportunity to be part of an important internal function.

The right candidate combines a broad knowledge of data protection and business security with a service-oriented approach. You enjoy having contact with many parts of our business, sharing your knowledge and contributing to the development of our department.

In this role, you will not have hierarchical management responsibilities, but you will play a key role in the compliance of the offers offered to our clients and in the compliance of our suppliers with National and European regulations, ISO certifications and SOC2 assurance. In this role, you collaborate with various stakeholders, effectively communicating and driving initiatives forward.

Key Responsibilities:

• Under the authority of the Business Security Officer of the Business Unit "Cyber with Business", Advise and support the Business Unit – Cyber with Business when it comes to Data Privacy and Security related topics.

• In cooperation with other members of the Global Security Department and under the functional authority of the DPO OCD, define and maintain the internal Security and Privacy framework.

• Act as a point of contact for data subject requests.

• Analyse, investigate, audit, and monitor that processing activities comply with the legal framework or the proper application of procedures, methods, or instructions relating to the protection of personal data

• Provide advice, upon request, regarding Data Protection Impact Assessments (DPIAs) or Privacy Impact Assessments (PIAs) and verify their implementation.

• Participate in awareness, and promote a "Data Protection and Privacy" culture

• Define and maintain, with the Orange Cyberdefense operational teams, the Generic Security Assurance Plans and certification for our cybersecurity products and services

• Maintain the procedures for managing client audits on information security and personal data protection commitments.

• Support the execution of internal and external audits.

• Provide support to the legal, sales, and pre-sales teams in responding to our clients' contractual requirements regarding information security and personal data protection (contractual clauses, questionnaires, security assurance plans, for example)

The ideal candidate will have:

• Strong execution capability and the ability to move from framework to implementation.

• Experience in defining, formalizing and improving procedures.

• Strong communication and stakeholder management skills.

• A structured, pragmatic and solution-oriented approach

• A strong sense of ownership and follow-through

We are looking for a candidatewho combines solid knowledge with a practical, delivery-focused mindset.

Required qualifications:

• Bachelors degree or equivalent experience acquired in other ways within Information Security, Risk Management, Privacy, Compliance or a related field

• At least 5+ years of relevant experience within the field.

• Strong knowledge of key frameworks and regulations including GDPR, DORA, NIS2, ISO 27001 and SOC 2.

• Experience with GRC tools, dashboards, compliance reporting and control monitoring.

• Experience driving implementation and adoption of processes and ways of working across cross-functional requirements.

• Strong written and verbal communication skills.

Preferred qualifications:

• ISO 27001 Lead Auditor/Implementer

• ISO 27035 Risk Manager/Lead Risk Manager

• ISO 27701 Lead Implementer/Auditor

• Relevant certifications i.e. CISSP, CISM, CISA, CRISC

• Strong business understanding and ability to apply Privacy and Security principles in a client-facing environment

• Experience of similar roles

• Ability to apply a risk-based and pragmatic approach to prioritization and implementation.

We Are Orange Cyberdefense

Orange Cyberdefense is Sweden's leading cybersecurity company. Our vision is simple yet powerful: We build a safer digital society.

We offer our customers services across a wide range of areas, from in-depth technical solutions to broader services such as security governance and management, risk modelling, and risk analysis. We have 400 colleagues in Sweden and 3,500 colleagues globally.

At Orange Cyberdefense, we are all different but share the same passion for cybersecurity – and that is our greatest strength. We are proud of our differences, experiences, and backgrounds, and we firmly believe that we need to include everyone in order to provide solutions that work for everyone. That is why we ensure that all applications are handled equally.

Other

We recruit continuously and will fill the position as soon as we find the right person.

Orange Cyberdefense – Together, we build a safer digital society.

Chez Orange, seules vos compétences comptent.

Quel que soit votre âge, genre, origine, parcours, religion, orientation sexuelle, handicap, neuroatypie, ou apparence, nous encourageons activement la diversité au sein de nos équipes, car elle constitue une force pour le collectif et un vecteur d’innovation.Orange est une entreprise handi-accueillante : n’hésitez pas à nous faire part de vos besoins spécifiques.