Senior Information Security Risk Specialist

COWI; Kongens Lyngby; On-site; DKK 900,000 - 1,300,000; Full time

Job summary

COWI is seeking a Senior Information Security Risk Specialist to lead the information security risk management processes across our global business. You will develop a consolidated risk picture, facilitate risk assessments, and translate complex issues into actionable treatments for senior leadership.

You will collaborate with IT, Legal, Procurement, Process & Quality, Transformation Office, and Business Lines to drive risk reduction with measurable outcomes and transparent reporting to the

Qualifications

• Strong experience with information security, governance and risk management.
• Excellent stakeholder management skills and the ability to translate complex topics into clear, actionable guidance.
• Strong analytical skills, a structured approach, and the ability to drive multiple parallel initiatives from idea to implementation.

Responsibilities

• Leading the identification, analysis, evaluation and prioritization of information security risks across COWI’s business operations, projects, digital solutions, information assets, and third‑party dependencies.
• Translating technical, regulatory and operational security issues into clear business‑risk scenarios, including credible causes, consequences, existing controls, risk exposure and treatment options.
• Facilitating strategic risk assessments and cross‑functional risk workshops with senior stakeholders, subject‑matter experts, and accountable risk owners.
• Preparing decision‑ready risk analysis and reporting for the Group CISO, Executive Management, the ERM Committee, the Audit Committee, and the Board of Directors.
• Developing risk treatment proposals and project charters for prioritized risks, including proposed scope, ownership, governance, outcomes, dependencies, resource requirements, milestones and measures of risk reduction.
• Supporting risk owners in defining practical key risk indicators, treatment progress measures and evidence that demonstrate whether risk exposure is being reduced.

Skills

Information security governance

Stakeholder management

Analytical skills

Communication skills

Job description

Do you want to turn complex information security risks into decisions and actions that protect the business and enable its strategic ambitions? At COWI, you will work at the intersection of cybersecurity, enterprise risk management, business operations, technology, and digital transformation. You will play a central role in identifying the information security risks that matter most and ensuring they lead to clear ownership, informed decisions, and effective risk reduction.

At COWI, we create sustainable solutions that improve the quality of life for people today and generations to come. Our experts work across infrastructure, energy, water, environment, architecture, and buildings, delivering projects that shape societies and support critical services around the world.

As a trusted advisor to clients and partners, information security is an essential part of how we deliver projects, protect information, manage risk, and maintain trust. Our increasing use of digital platforms, data, artificial intelligence, and software-based delivery models creates new opportunities, but also increases our exposure to cybersecurity, regulatory, supply-chain, and delivery risks.

Your role, responsibilities, and team

COWI is strengthening its approach to information security risk management as part of a broader development of Information Security and Enterprise Risk Management across the Group.

Our ambition is to identify and understand the most important information security risks facing COWI, enable informed management decisions, drive effective risk treatment, and provide transparency and assurance to Executive Management and the Board.

This role has been established to help turn that ambition into practice.

As Senior Information Security Risk Specialist, you will be responsible for driving the information security risk management process across COWI. You will develop a consolidated and business‑relevant risk picture, facilitate complex risk assessments, challenge assumptions, and translate material risks into decision‑ready treatment options.

An important part of the role is ensuring that significant risks are not simply recorded in a risk register. You will help transform prioritized risks into clearly defined initiatives and projects, with accountable business owners, realistic delivery plans, measurable outcomes, and transparent reporting.

You will be part of the Group CISO and the ERM function, and you will work closely with IT, Legal, Procurement, Process & Quality, Transformation Office, and Business Lines, incl. operational risk owners across all of these.

Your primary responsibilities will include

• Leading the identification, analysis, evaluation and prioritization of information security risks across COWI’s business operations, projects, digital solutions, information assets, and third‑party dependencies.
• Translating technical, regulatory and operational security issues into clear business‑risk scenarios, including credible causes, consequences, existing controls, risk exposure and treatment options.
• Facilitating strategic risk assessments and cross‑functional risk workshops with senior stakeholders, subject‑matter experts, and accountable risk owners.
• Preparing decision‑ready risk analysis and reporting for the Group CISO, Executive Management, the ERM Committee, the Audit Committee, and the Board of Directors.
• Developing risk treatment proposals and project charters for prioritized risks, including proposed scope, ownership, governance, outcomes, dependencies, resource requirements, milestones and measures of risk reduction.
• Supporting risk owners in defining practical key risk indicators, treatment progress measures and evidence that demonstrate whether risk exposure is being reduced.

Your skills. Our team. Together we design the future.

You are a proactive and accountable driver who identifies what needs to happen, aligns stakeholders, and delivers results—not just recommendations. Structured, pragmatic, and solution‑oriented, you thrive in fast‑paced environments, manage diverse requests efficiently, and stay focused on the priorities that create the biggest impact. You build trust across teams, challenge yourself constructively, and drive decisions when security requirements must be met. At the same time, you are curious and committed to continuous learning, staying ahead of threats, standards, and best practices while turning knowledge into practical improvements.

On top of that, you will have:

• Strong experience with information security, governance and risk management.
• Excellent stakeholder management skills and the ability to translate complex topics into clear, actionable guidance.
• Strong analytical skills, a structured approach, and the ability to drive multiple parallel initiatives from idea to implementation.
• Strong communicationskills and the ability to influence and create momentum
• Educational background?

A place to work and so much more

At COWI, we work together with our customers to shape a sustainable and liveable world. We do it by applying our knowledge and curiosity – and sometimes even our courage – to create the solutions the world needs today to enable a better tomorrow. We support our customers’ transition towards increased sustainability. We strive to lead by example by embedding environmental management, social responsibility, and good governance into our business practices and the options we provide for our customers. We value differences and development and cultivate an environment of belonging and having fun. Because that is what brings out the best in you, at work and at home.

With offices primarily located in Scandinavia, the UK, North America, and India, we are currently more than 7,500 people who bring their expertise in engineering, architecture, energy, and environment into play.

Got more questions?

If you have any unanswered questions about the role or what we have to offer, please reach out to Senior Global Talent Acquisition Specialist Mette Gutte at [e-mail]

Get to know us even better at our website, www.cowi.com, where you can learn more about our projects, our strategy, what we want to achieve and what life is like at COWI.

Diversity is fundamental to COWI, inclusion is key.

We are committed to creating a respectful and fair work environment where all employees have a sense of belonging and equitable opportunities to thrive and grow. We ensure that our leaders are role models for inclusive leadership by cultivating a culture where diverse perspectives and thoughts are seen as strengths. And we take diversity and inclusion into account in all relevant decisions and processes and when setting up teams and fora. We do it because it’s a part of our values and because it’s simply the right thing to do.