Senior Third-Party Risk & Security Advisor

Novo Nordisk A/S; Ballerup; Remote; DKK 743,000 - 1,092,000; Full time

Job summary

Novo Nordisk A/S in Denmark seeks a Senior Information Security Advisor to lead and mature the Third-Party Risk Management programme. You will ensure security, resilience and regulatory risks tied to suppliers are identified, assessed and managed across the supplier lifecycle, strengthening Novo's supply chain security.

Join a global team within Infrastructure and Information Security, collaborating with Procurement, Legal and business partners to embed security into procurement and contracts

Qualifications

• Minimum 10+ years in information security with Third-Party Risk Management.
• Hands-on experience conducting supplier security assessments and due diligence.
• Knowledge of ISO 27001/27002, ISO 27036, NIST CSF and SOC 2 audit reporting.
• Understanding of regulatory requirements affecting third-party and supply chain security (NIS2).
• Excellent stakeholder management and collaboration across diverse teams.

Responsibilities

• Develop and mature the TPRM programme, embedding security in procurement, ISMS and enterprise risk management.
• Contribute to governance, processes, methodologies, reporting and tooling for TPRM.
• Ensure alignment with Novo security requirements and regulatory obligations including NIS2.
• Integrate third-party security requirements into procurement, sourcing, contracting and lifecycle management.
• Advise contract owners on security requirements and risk treatment, supporting mitigations.
• Collaborate across business and technology to strengthen supply chain security and monitor supplier compliance.

Skills

Information security

Supplier risk assessments

InfoSec frameworks

Regulatory requirements (NIS2)

Stakeholder management

Team collaboration

Job description

Novo Nordisk A/S in Denmark seeks a Senior Information Security Advisor to lead and mature the Third-Party Risk Management programme. You will ensure security, resilience and regulatory risks tied to suppliers are identified, assessed and managed across the supplier lifecycle, strengthening Novo's supply chain security.

Join a global team within Infrastructure and Information Security, collaborating with Procurement, Legal and business partners to embed security into procurement and contracts