InfoSec & Compliance Program Lead

The Hub/Danske Bank; København; On-site; DKK 670,000 - 1,004,000; Full time

Job summary

Teton is forming a new information security and GRC function to own ISMS, certifications, and customer security assurance. You will automate evidence collection, draft policy updates, and scale security governance across Denmark, the UK, and the US.

You will build a trusted assurance package, run the Vanta-based program, and align with NHS, DTAC, and clinical safety requirements while preparing for future regulatory changes in healthcare AI and medical devices.

Qualifications

• 3–6 years in information security, GRC, or IT compliance.
• Hands-on with compliance automation platforms (Vanta/Drata/etc.).
• Understanding of GDPR, NIS2, and CRA in healthcare contexts.
• Experience with ISO 27001 implementation or certification cycles.
• Strong written English for customer-facing security documentation.

Responsibilities

• Own ISMS and ISO 27001 program from certification through ongoing operation.
• Run and improve the compliance platform, AI-assisted evidence collection.
• Manage security questionnaires, audits, and due diligence requests.
• Build a reusable assurance package and a trust center.
• Support readiness for NIS2, CRA, and related regulatory expectations.
• Coordinate IT security operations with engineering and IT.
• Maintain the risk register and communicate risk to leadership.

Skills

ISO 27001 implementation

Security governance

Automation mindset

Cloud security literacy

English writing skills

Tools

Vanta

Drata

Secureframe

Job description

Teton is forming a new information security and GRC function to own ISMS, certifications, and customer security assurance. You will automate evidence collection, draft policy updates, and scale security governance across Denmark, the UK, and the US.

You will build a trusted assurance package, run the Vanta-based program, and align with NHS, DTAC, and clinical safety requirements while preparing for future regulatory changes in healthcare AI and medical devices.