Senior Information Security Manager

Ambu; Denmark; On-site; DKK 800,000 - 1,100,000; Full time

Benefits offered by this job

Opportunities for personal development

Professional employee benefits

Job summary

Ambu in Ballerup, Denmark, is seeking an experienced Senior Information Security Manager to enhance security functions through GRC frameworks and controls. The ideal candidate has over 8 years of experience in cybersecurity, preferably within the MedTech sector, with strong skills in compliance and risk management. Candidates should also hold relevant certifications such as CISSP or CISM. The position offers opportunities for personal development, alongside a comprehensive range of employee benefits and exciting challenges.

Qualifications

• 8+ years of experience in cybersecurity, ideally from large organizations.
• Proven experience in GRC management within MedTech or healthcare.
• Relevant certifications such as CISSP, CISM, CRISC are preferred.

Responsibilities

• Develop and maintain GRC frameworks and policies.
• Drive implementation of key security controls and compliance measures.
• Conduct audits to identify and mitigate security risks.

Skills

Cybersecurity

GRC management

Stakeholder management

Project management

Communication

Education

Bachelor's degree in Information Security or related field

Tools

ISO27001

NIS2

UK CE+

Job description

Senior Information Security Manager

City: Ballerup

Country/Region: Denmark

Business Area: IT

Department: Global IT

Employment Type: Full-time

Req ID: 10164

Key Responsibilities

• Develop and Maintain GRC Frameworks: Enhance and update existing GRC frameworks, policies, and procedures to support a maturing security function.
• Drive Key Security Controls: Implement and manage security controls, including policies, procedures, supplier risk assessments, training and awareness programs, and metrics.
• Compliance Oversight: Ensure compliance with cybersecurity standards and regulations such as ISO27001, NIS2, and UK CE+. Conduct audits and assessments to identify and mitigate risks, and proactively strengthen the control environment.
• Cross-Functional Collaboration: Work with various departments to integrate security measures into business processes and decision-making.
• Risk Management: Identify, assess, and manage risks related to information security. Develop risk mitigation strategies that support business objectives.
• Training and Awareness: Develop and deliver training programs to enhance security awareness and ensure adherence to GRC policies and procedures.
• Metrics and Reporting: Establish and monitor key performance indicators (KPIs) to measure the effectiveness of GRC initiatives and develop presentations for senior management.

Suggested Candidate Profile

• 8+ years of experience in cybersecurity, preferably from large complex organizations.
• Bachelor's degree or higher in Information Security, Computer Science, or a related field.
• Relevant information security certifications such as CISSP, CISM, CRISC.
• Proven experience in GRC management within the MedTech or healthcare industry is an advantage.
• Strong understanding of regulatory requirements, policies, procedures, and industry best practices.
• Excellent communication, stakeholder, and project management skills. Ability to work collaboratively with a structured and curious mindset.
• Experience working in a multiculture environment is an advantage.
• A proactive and improvement-driven mindset, with motivation to build, enhance, and shape security capabilities rather than maintain the status quo.

Benefits

We offer great opportunities for personal development. Furthermore, we offer a wide range of professional, social and financial employee benefits in addition to exciting job challenges and continuous professional and personal development.