Senior Manager Information Compliance – Information Security Governance

Simon-Kucher; København; Hybrid; DKK 900,000 - 1,300,000; Full time

Benefits offered by this job

Remote or in-office flexibility

Health benefits

Career development opportunities

Entrepreneurial team culture

Global exposure

Job summary

Simon-Kucher Denmark is seeking a Senior Manager Information Compliance to shape governance for information security. You will own governance workstreams, collaborate with IT and business owners, and drive risk-based decisions.

You will strengthen the ISMS, translate requirements into practical guidance across identity, cloud, data handling, and supplier security, and contribute to client assurance responses and governance reporting. English fluency is essential.

Qualifications

• 7+ years in information security, governance, or risk management with independent ownership of governance work.
• Strong knowledge of ISO/IEC 27001 and ISMS; experience applying NIST CSF or similar.
• Practical understanding of security architecture, cloud, vulnerability management and incident response.
• Proven track record building and embedding policies and governance processes.
• Ability to work with technical and business stakeholders and back decisions with evidence.
• Experience leading cross-functional change and developing colleagues.
• Excellent written and spoken English; ISO 27001 qualifications useful but not required.

Responsibilities

• Own defined security-governance portfolio; keep policies and controls current.
• Maintain and improve risk assessment and exception processes with IT/business owners.
• Strengthen the ISMS, ISO/IEC 27001 governance, control mappings and reviews.
• Translate governance requirements into guidance for identity, access, cloud, SaaS and data handling.
• Provide second-line oversight by reviewing adherence and escalating gaps.
• Advise the business on security requirements and contribute to client assurance responses.
• Contribute to security priorities, roadmap and management reporting.
• Improve policy, evidence and reporting workflows using GRC tools and AI where valuable.

Skills

Security governance

Policy development

Risk management

Stakeholder collaboration

English communication

Leadership

Education

Relevant certifications (CISM/CISSP/CRISC)

Tools

GRC tools

AI governance tooling

Job description

DENMARK

Senior Manager Information Compliance - Information Security Governance

In Denmark - Copenhagen

Help shape how Simon-Kucher protects client and firm information. You will work closely with the Information Security Officer (ISO) and IT Security to turn security risks and business needs into workable policies, control requirements and governance processes. IT Security remains responsible for technical design, implementation and operation of security controls.

This is a hands-on governance role, not a security-operations position. You will own defined workstreams, support risk-based decisions and challenge implementation constructively. As the function develops, the scope of the role may broaden.

What Makes Us Special

• Become part of a unique entrepreneurial team. Think independently, use your initiative, and take some risks. Entrepreneurship is a powerful force that drives the growth not only of our firm but our clients and people.
• Unlock the power of opportunity. Advance your career in a thriving company that creates positive impact. We invest in your professional development every step of the way.
• Enjoy balance and flexible working. Be empowered to do your best work - whether it's remotely or in the office.
• Prioritize your health and wellbeing. No matter where you live, we offer a competitive suite of health benefits to help keep you and your loved ones safe.
• Work in a values-driven culture. At Simon-Kucher, our vision is to become the world's leading growth specialist. Our values guide the way we do business and communicate our distinctiveness. They sum up what we stand for, influence our culture, and drive how and why we do things.

How You Will Create An Impact

• Own a defined security-governance portfolio and keep policies, minimum control requirements, process standards and practical guidance current and usable.
• Maintain and improve security risk-assessment and exception processes, working with IT and business owners to document treatment options, ownership and decisions.
• Strengthen the ISMS, including ISO/IEC 27001 governance, control mappings, evidence requirements and management-review inputs.
• Translate governance requirements into practical implementation guidance for identity and privileged access, infrastructure, cloud and SaaS, supplier security, client projects, application security, data handling, vulnerability management and incident governance.
• Provide second-line oversight by reviewing adherence, evidence and exceptions, following up with risk and control owners and escalating material gaps where needed.
• Advise the business on security requirements and contribute to consistent client-assurance responses, working with Privacy, AI Governance, Legal and Procurement where topics overlap.
• Contribute to security priorities, roadmap and management reporting, including recommendations on investments based on risk, demand and business impact.
• Improve policy, evidence, exception and reporting workflows using governance, risk and compliance (GRC) tools, automation and approved AI where these add value.

Your Profile

• Typically seven or more years in information security, security governance, technology risk or a closely related field, with independent ownership of significant governance, policy or risk-management work.
• Strong working knowledge of ISO/IEC 27001 and an ISMS, and experience applying NIST CSF or comparable frameworks in a proportionate way.
• A practical understanding of security architecture and operations, including access controls, cloud, vulnerability management and incident response. Prior engineering or operational security experience is useful but not required.
• Evidence that you have built and embedded policies or governance processes and improved risk decisions, control ownership or implementation.
• The ability to work with technical specialists and senior business stakeholders, resolve unclear ownership and challenge decisions with evidence rather than hierarchy.
• Experience setting priorities, presenting trade-offs and leading cross-functional change. Experience developing colleagues is useful.
• Excellent written and spoken English. CISM, CISSP, CRISC or relevant ISO 27001 qualifications are useful but not mandatory. Danish is not required.
• Experience in international professional services, client security assurance, supplier risk, privacy or AI governance, TISAX, SOC 2, GRC tooling or workflow automation would be useful, but is not essential.

About Simon-Kucher

Simon-Kucher is a global consultancy with more than 2,200 employees in 30+ countries. Our sole focus is on unlocking better growth that drives measurable revenue and profit for our clients. As a trusted commercial advisor, we combine deep consulting expertise, growth specialization, and technology to scale impact. We optimize every lever of commercial strategy - product, pricing, innovation, marketing, sales, and digital - based on deep insights into what customers value and are willing to pay for. With over 40 years of experience in monetization, we are regarded as the world's leading commercial growth and pricing specialist. simon-kucher.com

We believe in building a culture that embraces diversity, equity, and inclusion, creating an environment in which our people feel valued, are able to be themselves and feel their contribution matters. If we get that right, remarkable things will happen; people will grow faster, innovate, feel valued, and create better outcomes for everyone - our people, our clients and, of course, our business.

Your Personal Contact

Name

[e-mail]