Senior Security Architect, Novonesis

Novonesis; Hørsholm; On-site; DKK 900,000 - 1,200,000; Full time

Benefits offered by this job

Hybrid work setup

Job summary

Novonesis is seeking a Senior Security Architect to evaluate business solutions from a security perspective across applications, SaaS, integrations, and data flows. You will address dependencies, security risks, and guide secure cloud adoption in a hybrid IT landscape.

You will work with security architects, enterprise architecture, and business teams to balance strong security with business needs. Fluency in English is required, with Danish language skills as a plus.

Qualifications

• Degree in Computer Science, Information Security, Engineering or equivalent.
• 7+ years in IT/cyber security; 3–5 years as security architect or senior security role.
• Hands-on experience securing cloud environments (Azure/AWS) and identity/access.
• Knowledge of NIST CSF 2.0, ISO 27001/27002, CIS Controls, NIS2.
• Familiarity with STRIDE, MITRE ATT&CK, and Zero Trust.
• Strong ability to communicate risks to technical and non-technical stakeholders.
• Fluent written and spoken English.

Responsibilities

• Lead security risk assessments, design reviews and threat modelling for IT solutions.
• Define security requirements, standards, and reference architectures (identity, cloud, Zero Trust).
• Guide secure adoption of cloud services, identity services, PAM, and AI solutions.
• Act as security architect for initiatives like digital transformation, NIS2, M&A due diligence.
• Advise on security risks and treatments, including exceptions and vetting.

Skills

Security architecture

Threat modelling

Zero Trust

Cloud security

Identity & access

AI security

Industry 4.0

Education

Bachelor's in CS / InfoSec

Tools

Azure

AWS

Entra ID

PAM

SAP

VMware

Job description

Interested in a career that matters?

Do you want to help shape how security is embedded into digital solutions across Novonesis? Join our Security Architecture team and help enable Novonesis to innovate, manufacture and grow securely. You will work in a collaborative, knowledge-sharing environment with 10+ security architects covering enterprise IT and OT/manufacturing security, protecting data and intellectual property and embedding security early into areas such as cloud, AI, SAP and Industry 4.0.

As Senior Security Architect, you will bring broad technical security expertise and a pragmatic, risk-based mindset to complex business and technology decisions.

The role & your impact

Your primary focus will be evaluating business solutions from a security perspective. You will look across the complete solution, including applications, SaaS platforms, integrations, infrastructure, identity and data flows, to understand dependencies and identify and address security risks.

Working across a large and evolving hybrid technology landscape, you will independently navigate complex, cross-functional challenges and help teams find the right balance between a strong security posture and business needs.

Your Key Responsibilities In This Role

• Lead technical security risk assessments, design reviews and threat modelling for new IT solutions, platforms and vendors, challenging designs where needed and recommending secure alternatives.
• Define security requirements, standards, patterns and reference architectures across areas such as identity, cloud, Zero Trust, hardening and Assume Breach.
• Guide the secure adoption of cloud services, identity services, privileged access and AI solutions, including controls for AI agents and security assessments of AI vendors.
• Act as security architect for strategic initiatives including digital transformation, NIS2, post-merger platform consolidation and M&A due diligence, as well as reviewing IT changes that affect security configurations.
• Advise system owners and business stakeholders on security risks and appropriate treatments, including technical assessments of security exceptions and application or site vetting.

What you’ll need to be successful in this role

We are looking for someone who brings broad cyber security expertise together with sound judgement and the ability to turn complex security considerations into pragmatic recommendations.

You will need:

• A degree in Computer Science, Information Security, Engineering or a related field, or equivalent professional experience.
• 7+ years of experience in IT/cyber security, including 3–5 years as a security architect or in a comparable senior technical security role.
• Hands‑on experience securing cloud environments such as Azure and/or AWS, identity and access including Entra ID and PAM, infrastructure, networks, business applications/ERP such as SAP, and virtualization.
• Solid knowledge of security frameworks and standards including NIST CSF 2.0, ISO 27001/27002 and CIS Controls, together with a working understanding of NIS2.
• Experience with threat modelling approaches such as STRIDE and MITRE ATT&CK, and Zero Trust principles.
• Strong analytical skills and the ability to assess security across an entire solution rather than individual components in isolation.
• The ability to explain risks clearly, build trust with technical and non-technical stakeholders, and constructively challenge proposed solutions while finding practical alternatives.
• Fluent written and spoken English.

Additional Skills & Interests We Value

It would be an advantage if you bring one or more of the following:

• Security certifications such as CISSP/CISSP-ISSAP, SABSA or CCSP.
• Experience with AI/LLM security.
• Experience with the Microsoft security stack, including Defender, Sentinel or Purview.
• Danish language skills.

Beyond your technical expertise, you are curious about new technologies and emerging threats, enjoy sharing knowledge and bring fresh perspectives to the team. You take ownership of outcomes and are comfortable prioritizing and making risk-based decisions in an environment where requirements are not always clear.

Most importantly, you approach security as an enabler: How can we do this securely?

What We Offer You

You will become part of Security Architecture, one of three teams within Novonesis Cyber Security alongside the Cyber Defense Center and Governance, Risk & Compliance.

You will collaborate with Security, Enterprise Architecture, Infrastructure & Operations, Cloud, Digital Workplace, Data and AI, Procurement, Legal and business teams as well as with external technology partners. The environment offers exposure to a broad technology landscape and opportunities to contribute to significant transformation and security initiatives.

The role is based at our Hørsholm site and follows a hybrid setup, with remote working days in line with Novonesis guidelines. Working hours are flexible, with occasional meetings across international time zones. Travel is limited to approximately 5–10%, including visits to manufacturing sites and team events.

Relevant information

Application deadline: 25 October, 2026

Contact

Chief Information Security Officer Michael Hänschell at [e-mail]

Our purpose guides the way

In Novonesis, we know that solutions rooted in biology can help solve humanity’s biggest challenges. Since we began more than a century ago, this has been our guide. It’s how we've gotten so far. And it’s how we'll impact the future. Now, more than ever, the world needs change. And with biosolutions, the possibilities for transformation are endless. If our purpose resonates with you, we encourage you to apply.

Opportunities for everyone

We are committed to an inclusive recruitment process and equal opportunity for all applicants. We make all employment decisions based on business needs and welcome candidates with a wide range of backgrounds, including ethnicity, religion, gender, sexual orientation, age, disability, or veteran status.

Explore Other Openings

If this position isn’t the right fit, you may still find other opportunities with us. You’re welcome to explore open roles or create a job agent to stay connected with future opportunities at novonesis.com/Career