Information Security & Regulatory Compliance Manager – ISO 27001 & European e-invoicing

iEDI ApS; Denmark; Remote; DKK 827,000 - 1,240,000; Part time

Benefits offered by this job

Flexible part-time role

Ownership of security program

Direct collaboration with management &

Job summary

iEDI ApS in Hellerup is seeking a part-time Information Security & Regulatory Compliance Manager with solid hands-on experience in ISO/IEC 27001:2022. You will own and develop information security management and help sustain its ISO 27001 certification, working with policies, controls, risk assessments, audits, and training.

The role covers regulatory developments in European e-invoicing, including Plateforme Agréée, and requires independent work, collaboration with management, developers, and

Qualifications

• Experience implementing ISO/IEC 27001:2022 ISMS
• Experience planning and conducting audits and risk assessments
• Ability to document processes and controls clearly
• Experience in regulatory compliance including GDPR, NIS2, DORA
• Familiarity with European e-invoicing requirements
• Fluent in English (written and spoken)

Responsibilities

• Maintain and develop ISMS in line with ISO/IEC 27001:2022
• Keep security policies, risk assessments, controls and documentation up to date
• Plan and conduct information security training for employees
• Prepare and conduct internal audits and follow up on findings
• Prepare organization for external surveillance and certification audits
• Monitor regulatory developments in e-invoicing and compliance
• Collaborate with management, developers and external auditors
• Drive compliance activities from planning to implementation

Skills

ISO 27001:2022

ISMS

Audits

Risk assessments

Documentation

Training

Regulatory watch

English fluency

Job description

Information Security & Regulatory Compliance Manager – ISO 27001 & European E-Invoicing (part-time)

On-site in our new HQ in beautiful surroundings in Hellerup.

About the role

We're looking for a part-time Information Security & Regulatory Compliance Manager with solid practical experience in ISO/IEC 27001:2022.

The role will be responsible for maintaining and further developing iEDI's management of Information Security and supporting its continued ISO 27001 certification.

You'll work directly with policies, controls, risk assessments, audits, documentation, training, and continuous improvement. Alongside information security, the role will also involve navigating regulatory developments relevant to iEDI, including European e-invoicing requirements and, in particular, the French requirements concerning Plateforme Agréée (PA).

This is a hands-on role. We're not simply looking for an advisory position, but rather someone who is comfortable taking ownership and carrying out the work together with management, developers, colleagues, and external auditors.

What we're looking for

We're looking for someone who enjoys taking ownership and turning regulatory and security requirements into practical, well-structured processes. You're comfortable working independently, but also know when to involve colleagues and stakeholders to move projects forward.

Ideally, you:

• Have practical experience working with ISO/IEC 27001:2022 and Information Security Management Systems (ISMS)


• Are structured, detail-oriented, and enjoy keeping documentation organised and up to date


• Can communicate complex security and compliance topics in a clear and practical way


• Are comfortable planning and conducting audits, risk assessments, and employee training


• Take initiative and are confident driving tasks from planning to implementation


• Have an interest in European digital regulation, such as e-invoicing, GDPR, NIS2, DORA, and related compliance frameworks


• Are fluent in English, both written and spoken

Don't tick every box? We know that great candidates don't always meet every single requirement. If you have a solid foundation in information security and enjoy learning new things, we'd still love to hear from you.

What you'll be doing

• Maintaining and developing our ISMS in accordance with ISO/IEC 27001:2022


• Keep security policies, risk assessments, controls, procedures, and supporting documentation up to date


• Plan and conduct information security training for employees


• Prepare and conduct internal audits and follow up on findings and non-conformities


• Prepare the organization for external surveillance and certification audits


• Maintain oversight of security incidents, corrective actions, and ways to improve them


• Follow relevant regulatory requirements such as GDPR, NIS2, DORA etc. etc.


• Monitor international developments within electronic invoicing and regulatory compliance


• Work closely with management, developers, operational colleagues, and external auditors


• Be comfortable working independently and taking ownership of compliance activities from beginning to end

What we offer

• An entrepreneurial environment in which your ideas are heard and your solutions welcome


• Significant ownership of an important area of the business


• The opportunity to work directly with both information security and emerging European regulatory requirements


• A close working relationship with management and our technical teams


• A flexible part-time role in a stable and growing international field


• The opportunity to shape how security and compliance are handled as the company continues to develop


• Social gatherings a few times a year where international colleagues are invited