GRC Specialist, CISO Office — Secure Compliance & Insights

Netcompany Group A/S; København; Sur place; DKK 650 000 - 900 000; Plein temps

Résumé du poste

Netcompany Group A/S in Denmark is seeking a GRC Specialist for the Group CISO Office to shape how the company measures, manages and documents information security. You will turn data, risk and regulation into practical decisions.

You will develop risk scenarios, establish KPIs, translate regulatory requirements into baselines, and drive security awareness activities, collaborating with IT, application security and business teams. This role emphasizes hands-on ownership and pragmatic delivery.

Qualifications

• Broad information security experience with technical depth.
• Ability to translate regulatory requirements into practical solutions.
• Hands-on, ownership driven and pragmatic.

Responsabilités

• Developing and maintaining risk scenarios, assessing the effectiveness of mitigating controls against the scenarios, and conducting risk assessments to support business decisions
• Establishing automated measurements and KPIs that provide insight into the implementation and effectiveness of security controls across the business
• Interpreting regulatory and contractual security requirements and translating these into Netcompany's security baselines and standard methodologies
• Planning and executing security awareness activities, including phishing simulations, targeted micro-learning, and onboarding/yearly awareness training
• Driving smaller security improvement projects from planning to implementation, combining coordination with hands-on execution

Connaissances

Risk management

Data analysis

Regulatory compliance

Communication

Formation

Bachelor's degree in IT

Outils

GRC tooling

Description du poste

Netcompany Group A/S in Denmark is seeking a GRC Specialist for the Group CISO Office to shape how the company measures, manages and documents information security. You will turn data, risk and regulation into practical decisions.

You will develop risk scenarios, establish KPIs, translate regulatory requirements into baselines, and drive security awareness activities, collaborating with IT, application security and business teams. This role emphasizes hands-on ownership and pragmatic delivery.