Part-Time ISO 27001 & Regulatory Compliance Lead

iEDI ApS; Denmark; Remote; DKK 827,000 - 1,240,000; Part time

Benefits offered by this job

Flexible part-time role

Ownership of security program

Direct collaboration with management &

Job summary

iEDI ApS in Hellerup is seeking a part-time Information Security & Regulatory Compliance Manager with solid hands-on experience in ISO/IEC 27001:2022. You will own and develop information security management and help sustain its ISO 27001 certification, working with policies, controls, risk assessments, audits, and training.

The role covers regulatory developments in European e-invoicing, including Plateforme Agréée, and requires independent work, collaboration with management, developers, and

Qualifications

• Experience implementing ISO/IEC 27001:2022 ISMS
• Experience planning and conducting audits and risk assessments
• Ability to document processes and controls clearly
• Experience in regulatory compliance including GDPR, NIS2, DORA
• Familiarity with European e-invoicing requirements
• Fluent in English (written and spoken)

Responsibilities

• Maintain and develop ISMS in line with ISO/IEC 27001:2022
• Keep security policies, risk assessments, controls and documentation up to date
• Plan and conduct information security training for employees
• Prepare and conduct internal audits and follow up on findings
• Prepare organization for external surveillance and certification audits
• Monitor regulatory developments in e-invoicing and compliance
• Collaborate with management, developers and external auditors
• Drive compliance activities from planning to implementation

Skills

ISO 27001:2022

ISMS

Audits

Risk assessments

Documentation

Training

Regulatory watch

English fluency

Job description

iEDI ApS in Hellerup is seeking a part-time Information Security & Regulatory Compliance Manager with solid hands-on experience in ISO/IEC 27001:2022. You will own and develop information security management and help sustain its ISO 27001 certification, working with policies, controls, risk assessments, audits, and training.

The role covers regulatory developments in European e-invoicing, including Plateforme Agréée, and requires independent work, collaboration with management, developers, and