Cybersecurity & Compliance Lead — EU Regs & ISMS Governance

Vestas; Aarhus kommune; On-site; DKK 900,000 - 1,200,000; Full time

Benefits offered by this job

Global exposure to regulatory issues

Career growth opportunities

Flexible working arrangements

Job summary

Vestas seeks a Cybersecurity & Compliance Lead to shape compliance under EU and international cyber laws, guiding governance of the ISMS and working with Group Legal, CISO Office and regional teams.

You will monitor regulatory developments impacting products, services and supply chains while translating legal requirements into actionable business decisions. This role emphasizes collaboration across an international environment and cross‑functional projects.

Qualifications

• 7+ years of experience managing an Information Security Management System in an international context.
• Strong knowledge of EU cybersecurity, technology, and data protection regulations.
• Experience advising complex legal issues in IT/OT environments.
• Excellent analytical abilities with a practical business mindset.
• Proficient English communication; Danish helpful but not required.
• Ability to work independently and collaboratively in an international setting.

Responsibilities

• Guide the organization on EU and international cybersecurity legislation (NIS2, Cyber Resilience Act) with practical guidance.
• Monitor regulatory developments and assess impact on products, operations, and supply chain.
• Provide pragmatic legal guidance to stakeholders in collaboration with Group Legal; translate requirements into actions.
• Support design and implementation of cybersecurity governance, policies and ISMS audits.
• Collaborate with global legal teams, CISO Office, and business units for alignment.
• Help establish a scalable regulatory operating model for monitoring and follow-up of regulatory requirements.

Skills

English communication

Analytical skills

Stakeholder management

Job description

Vestas seeks a Cybersecurity & Compliance Lead to shape compliance under EU and international cyber laws, guiding governance of the ISMS and working with Group Legal, CISO Office and regional teams.

You will monitor regulatory developments impacting products, services and supply chains while translating legal requirements into actionable business decisions. This role emphasizes collaboration across an international environment and cross‑functional projects.