EU Cyber Regulation & ISMS Lead

Vestas group; Aarhus; Hybrid; DKK 1,100,000 - 1,500,000; Full time

Job summary

Vestas seeks a Cybersecurity & Compliance Lead to govern cyber security laws and compliance within its Information Security Management System. You will work with group Legal and the CISO Office to translate regulatory requirements into practical actions for the business.

You will monitor EU and international legislation (NIS2, Cyber Resilience Act) and shape a scalable regulatory operating model across regions, ensuring alignment with legal and business units while supporting ongoing governance

Qualifications

• 7+ years of experience managing Information Security Management Systems in international contexts.
• Solid knowledge of EU cybersecurity, data protection regulation and technology regulation.
• Experience advising complex legal issues in technical or digital environments (IT/OT).
• Strong analytical skills with a practical business mindset.
• Excellent English communication; Danish proficiency is helpful but not required.
• Ability to work independently and in global, cross-functional teams.
• Team-oriented, proactive, and capable of stakeholder networking.
• Ability to translate regulatory topics into business-relevant language.
• Genuine interest in renewable energy and continuous improvement.

Responsibilities

• Guide the organization on EU and international cybersecurity legislation (NIS2, Cyber Resilience Act) with practical guidance.
• Monitor regulatory developments and assess impact on products, services, operations, and supply chain.
• Provide pragmatic legal guidance to stakeholders in collaboration with group Legal and CISO Office.
• Support design and implementation of cyber security governance, policies and ISMS-related audits and assessments.
• Collaborate with global legal teams and cross-functional projects for alignment across groups.
• Develop a scalable regulatory operating model with monitoring, interpretation and follow-up processes.

Skills

ISMS management

Cybersecurity regulation

GRC

Stakeholder management

Analytical thinking

English communication

Danish helpful

Job description

Vestas seeks a Cybersecurity & Compliance Lead to govern cyber security laws and compliance within its Information Security Management System. You will work with group Legal and the CISO Office to translate regulatory requirements into practical actions for the business.

You will monitor EU and international legislation (NIS2, Cyber Resilience Act) and shape a scalable regulatory operating model across regions, ensuring alignment with legal and business units while supporting ongoing governance