Senior TPRM Advisor - Security & Compliance

Novo Nordisk; Ballerup Kommune; On-site; DKK 743,000 - 1,092,000; Full time

Job summary

Novo Nordisk seeks a Senior Information Security Advisor to lead and mature the Third-Party Risk Management programme across the supplier lifecycle. You will strengthen supply chain security and protect Novo's information, systems and services through robust risk identification and mitigation.

You will work with stakeholders across Procurement, Legal and IS to embed security requirements in contracts and vendor onboarding, advancing governance and risk reporting globally.

Qualifications

• 10+ years of experience in Information Security, including Third-Party Risk Management.
• Experience conducting supplier security assessments, due diligence and risk evaluations.
• Knowledge of ISO 27001/27002, ISO 27036, NIST CSF and SOC 2 audit reporting.
• Understanding regulatory requirements affecting third-party security including NIS2.
• Strong stakeholder management and cross-functional collaboration.
• Team-player mindset and collaborative approach.

Responsibilities

• Drive and mature the TPRM programme, embedding security in procurement and ERM.
• Keep the programme aligned with Novo security requirements and regulatory obligations including NIS2.
• Integrate third-party security requirements into procurement, sourcing, contracting and lifecycle management.
• Advise contract owners on security requirements and mitigation plans.
• Collaborate across business and technology to strengthen supply chain security.
• Monitor supplier security and facilitate reassessment activities.

Skills

Information security

Third-Party Risk Management

Supplier security assessments

Due diligence

ISO 27001 / 27002

ISO 27036

NIST CSF

SOC 2 audit reporting

NIS2 compliance

Stakeholder management

Communication

Collaboration

Job description

Novo Nordisk seeks a Senior Information Security Advisor to lead and mature the Third-Party Risk Management programme across the supplier lifecycle. You will strengthen supply chain security and protect Novo's information, systems and services through robust risk identification and mitigation.

You will work with stakeholders across Procurement, Legal and IS to embed security requirements in contracts and vendor onboarding, advancing governance and risk reporting globally.