Information Security Management System Specialist

Foss Analytical A/S; Hillerød; On-site; DKK 620,000 - 900,000; Full time

Benefits offered by this job

None

Job summary

Foss Analytical A/S is seeking an Information Security Management System (ISMS) Specialist to join our team at the FOSS Innovation Centre in Hillerød. You will work directly with the Head of Information Security to build depth in governance, risk and compliance and drive ISMS initiatives across multiple sites.

In this onsite role, you will implement the ISMS tool, migrate controls, and collaborate with owners across IT, HR, Legal, and production to ensure robust security practices.

Qualifications

• Relevant education in IT security or equivalent.
• Knowledge of ISO/IEC 27001/27002 and ISMS concepts.
• Professional-level English language skills, written and spoken.
• Structured, thorough and able to drive tasks to completion.

Responsibilities

• Implement and operate our ISMS tool, migrate the control framework and risk register.
• Drive control implementation with IT, HR, Legal, R&D, Facility and production sites.
• Validate controls with evidence, test effectiveness, and track remediation.
• Support internal and external audits and gather audit-ready evidence.
• Maintain policies, procedures, records, and the SoA; support management reviews.
• Contribute to awareness and training across the organization.

Skills

Outgoing

Solution-oriented

Curious

Trustworthy

Education

Professionsbachelor in IT Security

Datamatiker with security specialization

Bachelor's in information security

Tools

Defender stack

Microsoft Sentinel

Microsoft Intune

Purview

GRC platforms

Job description

Department

IT, Finance & Compliance
Nils Foss Allé 1
3400 Hillerød

Country

Denmark

Every day, food and agricultural producers around the world make decisions worth millions based on measurements from a FOSS instrument. Roughly 85% of the world's milk production and 80% of the grain traded on the world market is tested using a FOSS solution, and we supply the 100 largest food companies on the planet.

FOSS was founded in Hillerød in 1956 by Nils Foss, who wanted to replace slow laboratory work with fast, reliable analysis. Seventy years later we are still family-owned, still headquartered in Hillerød, and still working on the same problem at a much larger scale.

The role

FOSS runs a mature, ISO 27001:2022-certified information security management system with obligations under NIS2 across several European entities.

We are looking for our new Information Security Management System (ISMS) Specialist. This role is for someone early in their information security career who wants to build real depth in governance, risk and compliance rather than watch it from the outside. You will work directly with the Head of Information Security, who will be your sponsor, sparring partner and safety net.

I the role, you will:

• Implement and operate our systems-based ISMS tool - configuring the platform, migrating our existing control framework, documentation and risk register into it, and making it the single source of truth rather than one more place to update.


• Drive control implementation with the business. Our controls live in IT, HR, Legal, R&D, Facility and our production sites. You will be the one who sits down with control owners, translates a requirement into something practically doable, and follows it to completion.


• Validate controls. Collect and assess evidence, test whether controls actually work as described, document findings and track remediation to closure.


• Support the audit cycle. Prepare for internal and external audits. Gather evidence and help our international sites get ready.


• Maintain the documentation set - policies, procedures, records and the Statement of Applicability - and support in keeping the management review and reporting cycle running.


• Contribute to awareness and training activities across the organization.

Expect to travel a few times a year to our European sites - mostly a few days at a time, to work with local teams on control implementation and audit readiness. It is one of the better parts of the job: it is much easier to help people once you have seen their reality.

Who we are looking for

Requirements:

• A relevant education - for example a Professionsbachelor (PBA) in IT Security, Datamatiker(Computer science) with a security specialization, a bachelor's degree in information security, or equivalent.


• Working knowledge of ISO/IEC 27001 and ISO/IEC 27002 - you understand what an ISMS is, what a control is, and why the difference between "documented" and "implemented" matters.


• Professional-level English, written and spoken. This is our corporate language.


• Structured, thorough and comfortable finishing things - a lot of this job is following up until something is genuinely done.

Nice to have:

• Certifications such as ISO 27001 Lead Implementer or Foundation.


• Danish language skills - a clear advantage in our Danish organization, but not a requirement.


• Exposure to NIS2, the CIS18 Controls framework, or GRC/ISMS platforms.


• Familiarity with the Microsoft security stack (Defender, Sentinel, Intune, Purview).


• Experience from a manufacturing, life-science or otherwise regulated environment.

Who you are:

• Outgoing. You will spend a large part of your week talking to people who do not work in security and do not think about it daily. You need to enjoy that, not endure it.


• Solution-oriented. You come back with a workable option rather than a list of reasons something cannot be done.


• Curious and willing to learn. We do not expect you to arrive fully formed. We expect you to want to get there.


• Trustworthy with sensitive information.

This is a full-time, onsite position at the FOSS Innovation Centre in Hillerød. Daily presence in the office is important to us - this role depends on being close to the colleagues and control-owners you will be working with.

What we offer

• A small, close-knit security team where your work is visible and your scope grows with your ability.


• Direct mentoring from the Head of Information Security, and ownership of a concrete, high-value project from day one.


• Exposure to the full breadth of an international ISMS - governance, audits, risk, technical controls and our European sites.


• A global, family-owned company with strong engineering traditions and colleagues who take quality seriously.


• Support for relevant certification and further training.

FOSS is committed to maintaining an inclusive and diverse culture. You can help us sustain an unbiased recruitment process by not including photo and age in your application.

About FOSS

Today, more than 8 billion people around the world are dependent on nutritional food. Tons of food being produced in a million different ways and under varying conditions, creating challenges all the way from field to fork. One of them, obviously, is the effect it has on climate change.

FOSS helps the world’s 100 biggest food companies, and more than 40,000 others around the world navigate exactly that with intelligent, data-driven and innovative analytical solutions. We are making sustainability a better business, and we’re doing so as the global market leader in our field – improving food quality, minimizing food waste, ensuring food safety, and securing fair payment.

Join a pioneering and innovative company in the food and agriculture industry. A company on a mission, with offices all around the world and 1,750 talented colleagues across 34 different countries.