Cybersecurity & Compliance Lead

Vestas group; Aarhus; Hybrid; DKK 1,100,000 - 1,500,000; Full time

Job summary

Vestas seeks a Cybersecurity & Compliance Lead to govern cyber security laws and compliance within its Information Security Management System. You will work with group Legal and the CISO Office to translate regulatory requirements into practical actions for the business.

You will monitor EU and international legislation (NIS2, Cyber Resilience Act) and shape a scalable regulatory operating model across regions, ensuring alignment with legal and business units while supporting ongoing governance

Qualifications

• 7+ years of experience managing Information Security Management Systems in international contexts.
• Solid knowledge of EU cybersecurity, data protection regulation and technology regulation.
• Experience advising complex legal issues in technical or digital environments (IT/OT).
• Strong analytical skills with a practical business mindset.
• Excellent English communication; Danish proficiency is helpful but not required.
• Ability to work independently and in global, cross-functional teams.
• Team-oriented, proactive, and capable of stakeholder networking.
• Ability to translate regulatory topics into business-relevant language.
• Genuine interest in renewable energy and continuous improvement.

Responsibilities

• Guide the organization on EU and international cybersecurity legislation (NIS2, Cyber Resilience Act) with practical guidance.
• Monitor regulatory developments and assess impact on products, services, operations, and supply chain.
• Provide pragmatic legal guidance to stakeholders in collaboration with group Legal and CISO Office.
• Support design and implementation of cyber security governance, policies and ISMS-related audits and assessments.
• Collaborate with global legal teams and cross-functional projects for alignment across groups.
• Develop a scalable regulatory operating model with monitoring, interpretation and follow-up processes.

Skills

ISMS management

Cybersecurity regulation

GRC

Stakeholder management

Analytical thinking

English communication

Danish helpful

Job description

Aarhus N, Region Central Jutland, DK, 8200

Work experience Management

Type of position Full-Time

Job Family Information Technology

Digital Solutions & Development > Digital Solutions > Intelligence & Performance

Shape the legal foundations of the energy transition

Vestas is a major player in wind energy and an important force behind the global shift to sustainable power. As our digital footprint and interconnected systems continue to grow, cyber security and technology regulation are becoming increasingly critical to our business, our customers, and society at large.

We are currently seeking a Cybersecurity & Compliance Lead focused on cyber security laws and regulations to support the ongoing development and governance of our Information Security Management System in collaboration with our GRC function.

Responsibilities

In this role, you will:

• Guide the organization on EU and international cybersecurity legislation, including NIS2, the Cyber Resilience Act, and related national implementations, by providing practical, actionable guidance tailored to stakeholders across the value chain
• Monitor and analyze regulatory developments and assess their impact on Vestas’ products, services, operations supply chain, and overall business model
• Provide pragmatic legal guidance to stakeholders across the value chain in close collaboration with group Legal, ensuring clear translation of legal requirements into business-relevant actions and decisions
• Support the design and implementation of cyber security governance, policies and compliance frameworks, including translation of regulatory requirements into ISMS support audits, assessments and line of business, collaborating with e.g. Public Affairs interactions with regulators and external stakeholders, including preparation of documentation and evidence demonstrating compliance
• Collaborate with legal colleagues globally and contribute to cross‑functional projects, ensuring alignment across Group Legal, CISO Office, business units, and regional/legal functions
• Contribute to establishing a coherent and scalable regulatory operating model, including processes for monitoring, interpretation, implementation, and follow-up of regulatory requirements

Qualifications

• 7+ years of experience within management of Information Security Management System in an international context including active anchoring of requirements from relevant global and local legalizations
• Solid knowledge and interests in EU cyber security, technology and data protection regulation
• Experience advising complex legal issues in a technical or digital environment covering the IT and OT domains
• Highly developed analytical skills and a practical business mindset
• Effective English communication skills are required; Danish proficiency is helpful, although not mandatory
• Ability to manage tasks on your own while contributing effectively in a collaborative, international setting
• A team-oriented mindset and effective stakeholder and network management abilities
• A pragmatic, structured and forward-thinking solution-oriented approach to problems
• The ability to translate regulatory cyber topics into business-relevant language
• Deep interest in renewable energy, global cooperation, and continual improvement
• A practical approach, with the ability and motivation to contribute meaningfully to cybersecurity and compliance deliverables, rather than only providing guidance on them

What We Offer

• A key role within a globally recognized green energy company
• Exposure to instrumental legal issues at the intersection of technology, regulation and sustainability
• A diverse, international and purpose‑driven working environment
• Opportunities for professional development and career growth
• Flexible working arrangements and competitive employment conditions
• Great colleagues in a great environment

At Vestas, you will contribute to a mission that matters. We value accountability, collaboration and commitment, and we believe that solid legal foundations are essential to a secure and sustainable energy future

DEIB Statement

At Vestas, we recognize the value of diversity, equity, and inclusion in driving innovation and success. We strongly encourage individuals from all backgrounds to apply, particularly those who may hesitate due to their identity or feel they do not meet every criterion. As our CEO states, "Expertise and talent come in many forms, and a diverse workforce enhances our ability to think differently and solve the complex challenges of our industry". Your unique perspective is what will help us powering the solution for a sustainable, green energy future.

About Vestas

Vestas is the energy industry’s global partner on sustainable energy solutions. We are specialised in designing, manufacturing, installing, and servicing wind turbines, both onshore and offshore.Across the globe, we have installed more wind power than anyone else. We consider ourselves pioneers within the industry, as we continuously aim to design new solutions and technologies to create a more sustainable future for all of us. With more than 185 GW of wind power installed worldwide and 40+ years of experience in wind energy, we have an unmatched track record demonstrating our expertise within the field.With 30,000 employees globally, we are a diverse team united by a common goal: to power the solution – today, tomorrow, and far into the future.Vestas promotes a diverse workforce which embraces all social identities and is free of any discrimination. We commit to create and sustain an environment that acknowledges and harvests different experiences, skills, and perspectives. We also aim to give everyone equal access to opportunity.To learn more about our company and life at Vestas, we invite you to visit our website at www.vestas.com and follow us on our social media channels. We also encourage you to join our Talent Universe to receive notifications on new and relevant postings.