Senior Third-Party Risk Security Advisor

Novo Nordisk; Ballerup; On-site; DKK 743,000 - 1,092,000; Full time

Job summary

Novo Nordisk is seeking a Senior Information Security Advisor to lead and mature the Third-Party Risk Management programme. You will ensure supplier and external partner risks are identified, assessed and managed across the lifecycle, strengthening supply chain security for Novo's information, systems and services.

You will work in a global environment, collaborating with Procurement, Legal and the broader Information Security team to drive secure vendor engagements and maintain regulatory

Qualifications

• 10+ years in Information Security with extensive Third-Party Risk Management in global orgs.
• Experience in supplier security assessments, due diligence, and risk evaluations.
• Knowledge of ISO 27001/27002, ISO 27036, NIST CSF and SOC 2 reporting.

Responsibilities

• Mature the TPRM programme and embed security in procurement and ERM.
• Develop governance, processes, reporting, and tooling for TPRM.
• Align with Novo security requirements, NIS2, and industry standards.
• Integrate third-party security into procurement, contracting, and onboarding.
• Advise on security requirements and mitigation plans with contract owners.
• Collaborate cross-functionally to reduce third-party risk exposure and monitor suppliers.

Skills

Third-Party Risk Management

Information Security

Supplier Security Assessments

Stakeholder Management

Risk Management

Security Frameworks

Job description

Novo Nordisk is seeking a Senior Information Security Advisor to lead and mature the Third-Party Risk Management programme. You will ensure supplier and external partner risks are identified, assessed and managed across the lifecycle, strengthening supply chain security for Novo's information, systems and services.

You will work in a global environment, collaborating with Procurement, Legal and the broader Information Security team to drive secure vendor engagements and maintain regulatory