GRC Specialist: Data-Driven Security & Risk Insights

Netcompany1; Denmark; On-site; DKK 650,000 - 900,000; Full time

Job summary

Netcompany is seeking a GRC professional to help ensure a data-driven view of security controls and regulatory compliance. You will work with the GRC team and collaborate across IT, operations and business functions while developing risk scenarios, KPIs and security baselines.

The role emphasizes hands-on, pragmatic governance and the ability to translate regulatory requirements into practical solutions, with focus on experienced professionals across multiple security areas.

Qualifications

• Hold a relevant degree or equivalent experience; within IT, engineering, computer science or a similar field.
• Strong analytic skills, with the ability to interpret data and draw meaningful conclusions independently.
• Experience within several of the areas listed in the overview of responsibilities in the role.
• Solid communication and collaboration skills, with the ability to engage effectively with technical teams, business functions, management and, on occasion, customers.
• Full professional proficiency in Danish and English (written and spoken).

Responsibilities

• Developing and maintaining risk scenarios, assessing the effectiveness of mitigating controls against the scenarios, and conducting risk assessments to support business decisions
• Establishing automated measurements and KPIs that provide insight into the implementation and effectiveness of security controls across the business
• Interpreting regulatory and contractual security requirements and translating these into Netcompany's security baselines and standard methodologies
• Planning and executing security awareness activities, including phishing simulations, targeted micro-learning, and onboarding/yearly awareness training
• Driving smaller security improvement projects from planning to implementation, combining coordination with hands-on execution
• Developing, maintaining and testing internal security processes, such as major incident response, crisis management and business continuity
• Developing, maintaining and testing internal security processes, such as major incident response, crisis management and business continuity

Job description

Netcompany is seeking a GRC professional to help ensure a data-driven view of security controls and regulatory compliance. You will work with the GRC team and collaborate across IT, operations and business functions while developing risk scenarios, KPIs and security baselines.

The role emphasizes hands-on, pragmatic governance and the ability to translate regulatory requirements into practical solutions, with focus on experienced professionals across multiple security areas.