Sr Information Security Advisor, Risk Management & Reporting

Novo Nordisk A/S; Ballerup; Remote; DKK 847,000 - 1,245,000; Full time

Job summary

Novo Nordisk A/S in Denmark is seeking a Senior Information Security Advisor for Risk Management & Reporting to strengthen our cyber risk governance. You will oversee IT/OT risk processes, drive the risk framework, and prepare leadership reports.

You will collaborate with risk owners, the CISO, and governance forums to translate complex security findings into actionable business insights. The role emphasizes independent judgment, proactive risk culture, and close partnership with

Qualifications

• 10+ years of experience within Information Security, Governance, Risk Management or a related discipline.
• Hands-on experience facilitating and conducting risk assessments in a complex organisational environment.
• Experience developing risk reporting and presenting findings to senior stakeholders.
• Strong knowledge of information security principles, risk management and industry frameworks such as ISO 27001/27002, ISO 27036, NIST CSF and SOC 2 audit reporting.
• Excellent stakeholder management, communication and facilitation skills.

Responsibilities

• Facilitate the IT/OT and information security risk process across Novo Nordisk A/S, supporting the business to identify, assess, manage and report risks.
• Drive and continuously improve the IT/OT and information security risk management framework, methodologies and supporting processes.
• Prepare high-quality reporting materials for leadership teams, governance forums and senior management.
• Communicate complex risk information in a clear, concise and business-relevant way.
• Promote a strong, proactive risk culture across the organisation.
• Support the integration of information security risks into broader enterprise risk management and governance processes.

Skills

Risk assessment

Risk reporting

Stakeholder management

Communication

Information security principles

Education

CISSP

CISM

CRISC

ISO 27001 Lead Auditor/Implementer

Job description

Sr Information Security Advisor, Risk Management & Reporting

Category: Digital & IT

Location

Ballerup, Capital Region of Denmark, DK

What you'll bring

• 10+ years of experience within Information Security, Governance, Risk Management or a related discipline, preferably in a large global organisation
• Hands‑on experience facilitating and conducting risk assessments in a complex organisational environment
• Experience developing risk reporting and presenting findings to senior stakeholders
• Strong knowledge of information security principles, risk management and industry frameworks such as ISO 27001 / 27002, ISO 27036, NIST CSF and SOC 2 audit reporting
• Excellent stakeholder management, communication and facilitation skills

Useful, but not essential:

Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, or equivalent information security and risk management certifications.

What you'll do

• Facilitate the IT/OT and information security risk process across Novo, supporting the business to identify, assess, manage and report risks
• Drive and continuously improve the IT/OT and information security risk management framework, methodologies and supporting processes
• Prepare high-quality reporting materials for leadership teams, governance forums and senior management
• Communicate complex risk information in a clear, concise and business-relevant way
• Promote a strong, proactive risk culture across the organisation
• Support the integration of information security risks into broader enterprise risk management and governance processes

Who you'll work with

In Enterprise IT & Quality, colleagues work across the Novo value chain, staying close to stakeholders and helping deliver trusted technology, high quality and responsible ways of working. You will join the Cyber Risk & Resilience department within Infrastructure and Information Security, focused on Governance, Compliance and Assurance, and Risk Management – including Corporate Governance, ISMS management, Board Risk Reporting, Regulatory Compliance and Third-Party Risk Management.

You will work alongside skilled professionals who support each other informally and collaborate closely to deliver high-quality work, including support to the Novo CISO and Top Management. Day to day, you will partner with business leaders, risk owners, Subject Matter Experts and governance forums to bring clarity to priorities and help decisions move forward.

What you can expect here

You will work in a collaborative, supportive environment where your expertise shapes decisions at the most senior levels of the organisation. You will be trusted to take ownership, make your voice heard and grow your impact across the value chain, while working with colleagues who combine curiosity, collaboration and ambition to keep information security a vital part of Novo's business.

What we offer

At Novo, you'll join a global healthcare company with a unique culture and strong results. We offer continuous learning, career development, and benefits tailored to your life and career stage.

Salary

For this role, the Annual Base Salary ranges from 847,000.00 to 1,245,100.00 DKK, corresponding to the level of the position. The placement within the salary range will be assessed during the recruitment process based on the candidate's skills, competencies, knowledge, and relevant experience.

Incentives and Benefits

The salary package may include short-term and/or long-term incentives as well as other employee benefits based on position level, location, functional area and relevant market benchmarks.

For more information about the role, please contact Caroline Viola Lester at [e-mail] or [phone].

We commit to an inclusive recruitment process and equality of opportunity for all our job applicants.