Information Security Leader: Framework, Risk & AI Governance

Plesner; Denmark; On-site; DKK 900,000 - 1,200,000; Full time

Job summary

Plesner is seeking an Information Security Manager to establish and continuously develop a robust security framework across the organisation. You will work with the Risk Management & Compliance team and IT to balance rapid business needs with security requirements.

Key responsibilities include coordinating client questionnaires, maintaining the GRC system, and ensuring ongoing awareness and training. Experience with ISO 27001/NIST and GDPR is valued; CISM/CISA or ISO 27001 Lead Implementer are

Qualifications

• Experience establishing and operating information security management systems (ISO 27001, NIST)
• Familiarity with GDPR and EU AI Act
• Certifications such as CISM, CISA or ISO 27001 Lead Implementer are a plus

Responsibilities

• Lead the development of a standardised information security framework
• Maintain and update the security framework to support certification decisions
• Coordinate responses to client compliance questionnaires
• Conduct security reviews of suppliers and partners
• Manage the information security component of the GRC system
• Develop and maintain business continuity and emergency plans
• Identify risks and report to management on security posture
• Develop and run an organisation-wide information security awareness program
• Draft AI governance guidelines and ensure compliant, secure AI usage

Skills

Information security

GRC

Risk management

Security governance

Compliance advisory

Education

IT/organization-focused education

Tools

GRC tools

Job description

Plesner is seeking an Information Security Manager to establish and continuously develop a robust security framework across the organisation. You will work with the Risk Management & Compliance team and IT to balance rapid business needs with security requirements.

Key responsibilities include coordinating client questionnaires, maintaining the GRC system, and ensuring ongoing awareness and training. Experience with ISO 27001/NIST and GDPR is valued; CISM/CISA or ISO 27001 Lead Implementer are