Security & Compliance Specialist for SaaS & Cloud

Karnov Group Denmark A/S; København; Hybrid; DKK 700,000 - 950,000; Full time

Job summary

Karnov Group Denmark A/S is seeking an Information Security Specialist to translate customer security, AI and privacy requirements into actionable information security requirements and to embed security into our products and cloud architecture. You will maintain ISMS, collaborate with cross-functional teams, and support day-to-day compliance activities.

The role requires 3–5 years in Information Security/IT Risk, strong knowledge of ISO 27001 and related standards, cloud experience (GCP/Azure),

Qualifications

• 3–5 years of experience in Information Security, IT Risk, or Technical GRC roles (SaaS, FinTech, LegalTech or cloud-native)
• Solid understanding of ISO 27001, ISAE 3402, SOC 2, CIS Benchmarks, and NIS2
• Experience in cloud environments (GCP/Azure) and secure software lifecycle (OWASP)
• Experience in vendor risk assessments and customer security evaluations
• Strong ability to translate technical risks into business language for stakeholders

Responsibilities

• Define security baselines for cloud platforms, APIs, and application development (DevSecOps).
• Maintain customer-facing security documentation and respond to security questionnaires.
• Conduct risk assessments of third-party vendors, SaaS tools, and AI service providers.
• Support ISMS governance, monitor control effectiveness and provide remediation guidance.
• Coordinate security initiatives with Information Security, Privacy, Security Operations and other teams across Europe

Skills

Information Security

IT Risk

GRC

Cloud security

Vendor risk assessments

Stakeholder management

ISO 27001

Education

Bachelor's degree in Computer Science, Information Security, Business Information Systems, or equivalent

Job description

Karnov Group Denmark A/S is seeking an Information Security Specialist to translate customer security, AI and privacy requirements into actionable information security requirements and to embed security into our products and cloud architecture. You will maintain ISMS, collaborate with cross-functional teams, and support day-to-day compliance activities.

The role requires 3–5 years in Information Security/IT Risk, strong knowledge of ISO 27001 and related standards, cloud experience (GCP/Azure),