Data Privacy & Security Specialist

Orange; København; Hybrid; DKK 900,000 - 1,200,000; Full time

Job summary

Orange Cyberdefense is seeking a Business Security & Data Privacy Officer to join the Global Security Department. You will balance data privacy with business security, collaborating across the organization to ensure compliant offers to clients and reliable supplier practices.

You will lead and advise without management responsibilities, defining internal security and privacy frameworks, handling data subject requests, and supporting audits and DPIAs.

Qualifications

• Bachelor's degree in a relevant field (information security, risk management, privacy, compliance).
• Minimum 5 years of relevant experience in information security, risk, privacy or compliance.
• Strong knowledge of GDPR, DORA, NIS2, ISO 27001 and SOC 2.
• Experience with GRC tools, dashboards, compliance reporting and control monitoring.
• Ability to drive processes and cross‑functional initiatives.
• Strong written and verbal communication skills.

Responsibilities

• Advise and support the Cyber with Business unit on data privacy and security topics.
• Define and maintain the internal Security and Privacy framework.
• Act as a point of contact for data subject requests.
• Analyze, investigate, audit, and monitor processing activities for compliance.
• Provide DPIA/PIA advice and verify implementation.
• Participate in awareness and promote a Data Protection and Privacy culture.
• Define and maintain Generic Security Assurance Plans and certification for products/services.
• Maintain procedures for client audits on information security and data protection commitments.
• Support the execution of internal and external audits.
• Assist legal, sales, and pre‑sales teams with contractual security requirements.

Skills

Strong execution capability

Procedures definition & improvement

Communication & stakeholder management

Structured, pragmatic, solution‑or‑or

Ownership & follow‑through

Delivery‑focused mindset

Education

Bachelor's degree or equivalent in Information Security, Risk Management, Privacy, Compliance or related field

5+ years of relevant experience

ISO 27001 Lead Auditor/Implementer

ISO 27035 Risk Manager/Lead Risk Manager

ISO 27701 Lead Implementer/Auditor

CISSP, CISM, CISA, CRISC certifications

Job description

Orange Cyberdefense is seeking a Business Security & Data Privacy Officer to join the Global Security Department. You will balance data privacy with business security, collaborating across the organization to ensure compliant offers to clients and reliable supplier practices.

You will lead and advise without management responsibilities, defining internal security and privacy frameworks, handling data subject requests, and supporting audits and DPIAs.