Lead consultant - Information protection and Data security

Energinet; Fredericia Kommune; On-site; DKK 900,000 - 1,300,000; Full time

Job summary

Energinet, Denmark's energy infrastructure operator, seeks a Lead consultant for Information protection and Data security to fortify critical systems against cyber threats. You will translate security requirements into concrete, operational solutions across cloud, on‑prem and hybrid environments.

You will lead the Attack Surface Management efforts, define technical standards, and collaborate with vendors and internal teams to ensure safe data handling and governance.

Qualifications

• Solid understanding of IT infrastructure (networks, servers, identity, cloud and on‑prem).
• Experience implementing information protection technologies.
• Ability to write precise requirements and technical docs.
• Engineering or computer science education, or equivalent practical experience.
• Certification in security (e.g., Microsoft Security, GIAC, CISSP).
• Structured, self‑managed work style with collaboration.

Responsibilities

• Oversee design and optimization of enterprise information protection.
• Develop data protection strategies: classification, labeling, encryption, DLP, governance.
• Deploy and enhance Microsoft Purview and related protections.
• Protect sensitive information across cloud, hybrid, and on‑prem environments.
• Define technical standards and security architectures for information protection.
• Translate findings into actionable recommendations for stakeholders.
• Guide security projects by embedding protections early in initiatives.
• Collaborate with vendors to meet Energinet's security requirements.

Skills

Infrastructure knowledge

Info protection technologies

Technical documentation

Engineering degree or equivalent

Security certifications

Structured/self-managed work style

Education

Engineering or Computer Science degree

Tools

Microsoft Purview

Job description

Lead consultant - Information protection and Data security

Do you want to help build the technical protection layers that keep Denmark's electricity, gas and hydrogen infrastructure safe from cyber threats?

Energinet is looking for a skilled cyber security professional for our new Attack Surface Management department in the Group Cyber and Information Security unit. You will be the focal point for translating security requirements into concrete, operational solutions, from requirements documents to the finished implementation of security tools and technologies.

Key Responsibilities

• Oversee the design, implementation, and optimization of enterprise information protection capabilities.
• Develop and implement data protection strategies covering data classification, labeling, encryption, data loss prevention (DLP), information governance, and secure data sharing.
• Oversee the deployment and enhancement of technologies such as Microsoft Purview and related information protection solutions.
• Ensure sensitive information is appropriately protected across cloud, hybrid, and on-premises environments.
• Develop security requirements, technical standards & baselines for infrastructure, platforms, applications, and data.
• Implement information security improvements across networks, endpoints, servers, cloud platforms, and supplier-integrated environments.
• Act as a technical authority on information protection and security engineering practices
• Translate technical findings into actionable recommendations for technical and non-technical stakeholders
• Define technical standards and security architectures for information protection and data governance.
• Guide project outcomes by ensuring security considerations are embedded early in technology initiatives.
• Collaborate with vendors and strategic partners to ensure solutions meet Energinet's security standards and operational requirements

“We offer a job with a high level of professionalism and great societal significance, where you help protect Denmark's critical energy infrastructure. You will have skilled colleagues, good opportunities for professional development and flexibility in everyday life – in an organization that is growing and where cyber security is a high priority” – Arpan Roy, Director, Attack Surface Management.

We expect you to

• Have a solid technical understanding of infrastructure - e.g. networks, servers, identity, cloud and on-prem environments.
• Have experience in implementing information protection technologies
• Can write precise requirements documents and technical documentation that others can act on.
• Have an education as an engineer, computer scientist or equivalent - or solid practical experience at the same level.
• Preferably have a relevant certification (e.g. Microsoft Security, GIAC or CISSP).
• Works in a structured and self-managed manner and thrives on both immersion and collaboration.

About The Department

At our office in Ballerup or Fredericia, you will be part of Attack Surface Management & Technical Cyber Protection – a new department under the Group Cyber and Information Security unit. The department is responsible for the technical protection layers that reduce Energinet's attack surface, vulnerability management, penetration testing, protection of platforms, data and applications, as well as secure configuration and hardening.

Together with the other departments in Cyber and Information Security, we are responsible for developing and operating the organisation, processes and technologies within cyber and information security in Energinet and for coordinating the IT preparedness in the electricity, gas and hydrogen sectors. You will have a broad interface across the IT and OT environment and get close to some of Denmark's most socially critical systems.

Special conditions: As Energinet performs tasks critical to society, we carry out background checks prior to employment. Employment is conditional upon your background check being compatible with employment at Energinet. The background check is also carried out once a year.

The position also requires that you are able to obtain and maintain security clearance. On PET's website, you can read more about security clearance.

We see diversity as a strength and encourage all qualified people, regardless of background, to apply for the job. We work actively and determinedly with diversity in Energinet and therefore encourage you to exclude information about age, marital status, etc. to minimise outage biases in the process. You can read more about our diversity policy here.

Energinet is an independent public company that reprecents society's interests when supplying Denmark with electricity and gas and that the energy system is converted to green energy. Our culture is closely linked to our social responsibility, and we work actively with the UN's global goals on sustainable energy, climate action, partnerships for action as well as industry, innovation, and infrastructure. By leading the way in the green transition, we can help to solve the global climate challenge. New solutions require us to be able to see problems from many different angles, and diversity is therefore a keyword in our culture. We strive to listen to, involve and share our knowledge. Based on the values of courage and trust, we focus on constantly developing ourselves as an organisation and as people. Read more at our website www.energinet.dk.

Se film om Energinet.

You will become part of a culture and organization that revolves around a highly meaningful purpose: ensuring the steady supply of electricity and gas to all areas of Danish life and society – while at the same time transitioning the energy system to a greener and sustainable future.

Together, we balance your individual work-life preferences and the needs of Energinet as an organization. And you will have a great say in where and when you do your job. Find out more about our flexible employee benefits - including our active staff association, industry-leading family and parental package, home work station and senior employee scheme – to name but a few.