ISMS & GRC Lead: Build Scalable Security & Compliance

Teton.ai

København

On-site

DKK 900,000 - 1,100,000

Full time

9 days ago

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Teton.ai is hiring an Information Security & Compliance Manager to own and scale the ISMS, ISO 27001 program, and regulatory compliance across Denmark, the UK, and the US. You will automate evidence collection, draft policy updates, and work closely with engineering and customers’ security teams.

Ideal candidates bring 3–6 years in information security or IT compliance and hands-on experience with Vanta/Drata/Secureframe.

Qualifications

3–6 years of experience in information security, GRC, or IT compliance.
Hands-on experience with compliance automation platforms (Vanta, Drata, Secureframe, or similar).
Solid technical literacy for cloud security and vendor security posture assessment.
Understanding of GDPR, NIS2, and regulatory frameworks in healthcare.
Strong written English; Danish is a plus but not required.

Responsibilities

Own ISMS and ISO 27001 program: certification readiness and ongoing operation.
Run and improve the Vanta implementation: integrations, tests, evidence collection, policy management.
Manage customer security assurance: questionnaires, audits, and due diligence requests.
Build a scalable trust center and reusable assurance package.
Coordinate security certifications and evidence for UK, Denmark, US contexts.
Oversee IT security operations: access management, endpoint security, vendor reviews, incident response.
Prepare for NIS2, CRA, and AI regulation impacts in partnership with compliance lead.
Maintain risk register and security risk ownership at leadership level.