Information Security Management System Specialist

FOSS Analytics; Denmark; On-site; DKK 550,000 - 750,000; Full time

Job summary

FOSS is seeking an Information Security Management System (ISMS) Specialist to join our Governance, Risk and Compliance team at the Innovation Centre in Hillerød, Denmark. You will work directly with the Head of Information Security, implementing and operating our ISMS tool and migrating our control framework into a single source of truth.

We value a curious, trustworthy, and service-oriented candidate who can engage with non-security stakeholders across IT, HR, Legal, and production.

Qualifications

• Relevant education such as a PBA in IT Security or a BSc in information security.
• Working knowledge of ISO/IEC 27001 and 27002.
• Professional-level English, written and spoken.
• Structured, thorough and comfortable finishing things.
• Certifications such as ISO 27001 Lead Implementer or Foundation.
• Danish language skills are a clear advantage.
• Exposure to NIS2, CIS18 Controls framework, or GRC/ISMS platforms.
• Familiarity with the Microsoft security stack (Defender, Sentinel, Intune, Purview).
• Experience from a manufacturing, life-science or regulated environment.

Responsibilities

• Implement and operate our systems-based ISMS tool, configuring the platform and migrating the control framework.
• Drive control implementation with various business units and owners.
• Validate controls by collecting evidence and tracking remediation to closure.
• Support the audit cycle and help international sites prepare for audits.
• Maintain the documentation set and support management review and reporting.
• Contribute to awareness and training activities across the organization.

Skills

ISMS governance

English proficiency

Structured & thorough

Project coordination

Trustworthy with sensitive information

Education

PBA in IT Security

Datamatiker (computer science) with security

BSc in information security

Equivalent security degree

Job description

Information Security Management System Specialist

Published:2026-08-11 Department
IT, Finance & Compliance
Nils Foss Allé 1
3400Hillerød

Country
Denmark

Every day, food and agricultural producers around the world make decisions worth millions based on measurements from a FOSS instrument. Roughly 85% of the world's milk production and 80% of the grain traded on the world market is tested using a FOSS solution, and we supply the 100 largest food companies on the planet.

FOSS was founded in Hillerød in 1956 by Nils Foss, who wanted to replace slow laboratory work with fast, reliable analysis. Seventy years later we are still family-owned, still headquartered in Hillerød, and still working on the same problem at a much larger scale.

The role

FOSS runs a mature, ISO 27001:2022-certified information security management system with obligations under NIS2 across several European entities.

We are looking for our new Information Security Management System (ISMS) Specialist. This role is for someone early in their information security career who wants to build real depth in governance, risk and compliance rather than watch it from the outside. You will work directly with the Head of Information Security, who will be your sponsor, sparring partner and safety net.

I the role, you will:

• Implement and operate our systems-based ISMS tool - configuring the platform, migrating our existing control framework, documentation and risk register into it, and making it the single source of truth rather than one more place to update.
• Drive control implementation with the business. Our controls live in IT, HR, Legal, R&D, Facility and our production sites. You will be the one who sits down with control owners, translates a requirement into something practically doable, and follows it to completion.
• Validate controls. Collect and assess evidence, test whether controls actually work as described, document findings and track remediation to closure.
• Support the audit cycle. Prepare for internal and external audits. Gather evidence and help our international sites get ready.
• Maintain the documentation set - policies, procedures, records and the Statement of Applicability - and support in keeping the management review and reporting cycle running.
• Contribute to awareness and training activities across the organization.

Expect to travel a few times a year to our European sites - mostly a few days at a time, to work with local teams on control implementation and audit readiness. It is one of the better parts of the job: it is much easier to help people once you have seen their reality.

Who we are looking for

Requirements:

• A relevant education - for example a Professionsbachelor (PBA) in IT Security, Datamatiker(Computer science) with a security specialization, a bachelor's degree in information security, or equivalent.
• Working knowledge of ISO/IEC 27001 and ISO/IEC 27002 - you understand what an ISMS is, what a control is, and why the difference between "documented" and "implemented" matters.
• Professional-level English, written and spoken. This is our corporate language.
• Structured, thorough and comfortable finishing things - a lot of this job is following up until something is genuinely done.

Nice to have:

• Certifications such as ISO 27001 Lead Implementer or Foundation.
• Danish language skills - a clear advantage in our Danish organization, but not a requirement.
• Exposure to NIS2, the CIS18 Controls framework, or GRC/ISMS platforms.
• Familiarity with the Microsoft security stack (Defender, Sentinel, Intune, Purview).
• Experience from a manufacturing, life-science or otherwise regulated environment.

Who you are:

• Outgoing. You will spend a large part of your week talking to people who do not work in security and do not think about it daily. You need to enjoy that, not endure it.
• Solution-oriented. You come back with a workable option rather than a list of reasons something cannot be done.
• Curious and willing to learn. We do not expect you to arrive fully formed. We expect you to want to get there.
• Trustworthy with sensitive information.

This is a full-time, onsite position at the FOSS Innovation Centre in Hillerød. Daily presence in the office is important to us - this role depends on being close to the colleagues and control-owners you will be working with.

What we offer

• A small, close-knit security team where your work is visible and your scope grows with your ability.
• Direct mentoring from the Head of Information Security, and ownership of a concrete, high-value project from day one.
• Exposure to the full breadth of an international ISMS - governance, audits, risk, technical controls and our European sites.
• A global, family-owned company with strong engineering traditions and colleagues who take quality seriously.
• Support for relevant certification and further training.

FOSS is committed to maintaining an inclusive and diverse culture.

About FOSS

Today, more than 8 billion people around the world are dependent on nutritional food. Tons of food being produced in a million different ways and under varying conditions, creating challenges all the way from field to fork. One of them, obviously, is the effect it has on climate change.

FOSS helps the world’s 100 biggest food companies, and more than 40,000 others around the world navigate exactly that with intelligent, data-driven and innovative analytical solutions. We are making sustainability a better business, and we’re doing so as the global market leader in our field – improving food quality, minimizing food waste, ensuring food safety, and securing fair payment.

Join a pioneering and innovative company in the food and agriculture industry. A company on a mission, with offices all around the world and 1,750 talented colleagues across 34 different countries.