ISMS & GRC Lead: Build Scalable Security & Compliance

Teton.ai; København; On-site; DKK 900,000 - 1,100,000; Full time

Job summary

Teton.ai is hiring an Information Security & Compliance Manager to own and scale the ISMS, ISO 27001 program, and regulatory compliance across Denmark, the UK, and the US. You will automate evidence collection, draft policy updates, and work closely with engineering and customers’ security teams.

Ideal candidates bring 3–6 years in information security or IT compliance and hands-on experience with Vanta/Drata/Secureframe.

Qualifications

• 3–6 years of experience in information security, GRC, or IT compliance.
• Hands-on experience with compliance automation platforms (Vanta, Drata, Secureframe, or similar).
• Solid technical literacy for cloud security and vendor security posture assessment.
• Understanding of GDPR, NIS2, and regulatory frameworks in healthcare.
• Strong written English; Danish is a plus but not required.

Responsibilities

• Own ISMS and ISO 27001 program: certification readiness and ongoing operation.
• Run and improve the Vanta implementation: integrations, tests, evidence collection, policy management.
• Manage customer security assurance: questionnaires, audits, and due diligence requests.
• Build a scalable trust center and reusable assurance package.
• Coordinate security certifications and evidence for UK, Denmark, US contexts.
• Oversee IT security operations: access management, endpoint security, vendor reviews, incident response.
• Prepare for NIS2, CRA, and AI regulation impacts in partnership with compliance lead.
• Maintain risk register and security risk ownership at leadership level.

Skills

Information security

GRC

IT compliance

Cloud security

Security tooling

Education

ISO 27001 implementation

Tools

Vanta

Drata

Secureframe

Job description

Teton.ai is hiring an Information Security & Compliance Manager to own and scale the ISMS, ISO 27001 program, and regulatory compliance across Denmark, the UK, and the US. You will automate evidence collection, draft policy updates, and work closely with engineering and customers’ security teams.

Ideal candidates bring 3–6 years in information security or IT compliance and hands-on experience with Vanta/Drata/Secureframe.