GRC & Security Risk Analyst

Netcompany; Region Hovedstaden; On-site; DKK 700,000 - 900,000; Full time

Job summary

Netcompany's Group CISO Office is seeking a broad-based information security professional to join the GRC team. You will help shape how the company measures and improves its security controls, risks and regulatory compliance across the organisation.

The role emphasizes practical, data-driven decisions, hands-on ownership, and collaboration with Application Security, Operations, Internal IT and business units.

Qualifications

• Bachelor or higher in IT, engineering, computer science or equivalent.
• Experience in information security governance, risk and compliance (GRC) is preferred.
• Ability to translate regulatory requirements into practical, technical controls.
• Hands-on approach and ownership mindset.

Responsibilities

• Develop and maintain risk scenarios and assess mitigating controls against them.
• Establish automated measurements and KPIs for security controls.
• Interpret regulatory requirements and translate into baselines and methodologies.
• Plan and conduct security awareness activities and phishing simulations.
• Drive security improvement projects from planning to implementation.
• Develop and test internal security processes, such as incident response and business continuity.

Skills

Analytical skills

Communication and collaboration

Bilingual Danish/English

Education

Degree in IT/engineering/computer science

Job description

Netcompany's Group CISO Office is seeking a broad-based information security professional to join the GRC team. You will help shape how the company measures and improves its security controls, risks and regulatory compliance across the organisation.

The role emphasizes practical, data-driven decisions, hands-on ownership, and collaboration with Application Security, Operations, Internal IT and business units.