Remote-Eligible Cloud & GRC Information Security Lead

Karnov Group Denmark; København; Hybrid; DKK 800,000 - 1,100,000; Full time

Benefits offered by this job

Partly remote work

Central Copenhagen location

Job summary

Karnov Group in Copenhagen seeks a governance, risk and technical assurance professional to embed security across SaaS, cloud environments and AI capabilities. You’ll translate customer security and regulatory requirements into IS requirements for our digital products and ISMS governance, while supporting day‑to‑day compliance activities.

You will collaborate with Product, Development, Architecture and Legal teams across Europe to drive security initiatives and maintain evidence and controls.

Qualifications

• Min 3–5 years in Information Security, IT Risk or Technical GRC (SaaS/FinTech cloud).
• Knowledge of ISO/IEC 27001, ISAE 3402, SOC 2, CIS Benchmarks, NIS2.
• Cloud experience (GCP/Azure) and OWASP security.
• Vendor risk assessments and responding to customer security evaluations.
• Ability to translate risks to business language for stakeholders.
• Fluent English; additional European languages are a plus.

Responsibilities

• Define security baselines for cloud platforms, APIs and DevSecOps.
• Maintain customer-facing security documentation and responses to questionnaires.
• Assess third-party vendors, SaaS tools and AI service providers.
• Support ISMS improvements and remediation guidance.
• Coordinate security initiatives across European entities.

Skills

Information Security

IT Risk

Technical GRC

Cloud Security

Vendor Risk

Stakeholder Management

Regulatory Knowledge

English Proficiency

Education

Bachelor's degree

Job description

Karnov Group in Copenhagen seeks a governance, risk and technical assurance professional to embed security across SaaS, cloud environments and AI capabilities. You’ll translate customer security and regulatory requirements into IS requirements for our digital products and ISMS governance, while supporting day‑to‑day compliance activities.

You will collaborate with Product, Development, Architecture and Legal teams across Europe to drive security initiatives and maintain evidence and controls.