Sr Information Security Advisor, Risk Management & Reporting

Novo Nordisk; Ballerup Kommune; On-site; DKK 847,000 - 1,245,000; Full time

Job summary

Novo Nordisk is seeking a Senior Information Security Advisor to strengthen how information security risks are identified, understood and reported across Novo. You will turn complex risk information into clear insight that leaders and risk owners can act on, helping the business make well-informed decisions at pace.

Your work will help protect Novo's ability to keep serving people living with serious chronic diseases worldwide.

Qualifications

• 10+ years of experience within Information Security or a related discipline.
• Hands-on experience facilitating and conducting risk assessments in a complex environment.
• Experience developing risk reporting and presenting findings to senior stakeholders.
• Strong knowledge of information security principles and industry frameworks (ISO 27001/27002, NIST CSF, SOC 2).
• Excellent stakeholder management, communication and facilitation skills.

Responsibilities

• Facilitate IT/OT and information security risk processes across Novo and report risks to leaders.
• Drive and improve the risk management framework, methodologies and processes.
• Prepare high-quality reporting materials for leadership, governance forums and senior management.
• Communicate complex risk information in a clear, business-relevant way.
• Promote a strong, proactive risk culture across the organisation.
• Support integration of information security risks into enterprise risk management and governance.

Skills

10+ years information security

Risk assessments

Risk reporting

Information security standards

Stakeholder management

Job description

Location

Ballerup, Denmark

Job category

Enterprise IT & Quality

Your impact begins here

As Senior Information Security Advisor, you will strengthen how information security risks are identified, understood and reported across Novo. You will turn complex risk information into clear insight that leaders and risk owners can act on, helping the business make well-informed decisions at pace. Your work will help protect Novo's ability to keep serving people living with serious chronic diseases worldwide.

What You'll Bring

• 10+ years of experience within Information Security, Governance, Risk Management or a related discipline, preferably in a large global organisation


• Hands‑on experience facilitating and conducting risk assessments in a complex organisational environment


• Experience developing risk reporting and presenting findings to senior stakeholders


• Strong knowledge of information security principles, risk management and industry frameworks such as ISO 27001 / 27002, ISO 27036, NIST CSF and SOC 2 audit reporting


• Excellent stakeholder management, communication and facilitation skills

Useful, But Not Essential

Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, or equivalent information security and risk management certifications.

What You'll Do

• Facilitate the IT/OT and information security risk process across Novo, supporting the business to identify, assess, manage and report risks


• Drive and continuously improve the IT/OT and information security risk management framework, methodologies and supporting processes


• Prepare high-quality reporting materials for leadership teams, governance forums and senior management


• Communicate complex risk information in a clear, concise and business-relevant way


• Promote a strong, proactive risk culture across the organisation


• Support the integration of information security risks into broader enterprise risk management and governance processes

Who You'll Work With

In Enterprise IT & Quality, colleagues work across the Novo value chain, staying close to stakeholders and helping deliver trusted technology, high quality and responsible ways of working. You will join the Cyber Risk & Resilience department within Infrastructure and Information Security, focused on Governance, Compliance and Assurance, and Risk Management – including Corporate Governance, ISMS management, Board Risk Reporting, Regulatory Compliance and Third‑Party Risk Management.

You will work alongside skilled professionals who support each other informally and collaborate closely to deliver high-quality work, including support to the Novo CISO and Top Management. Day to day, you will partner with business leaders, risk owners, Subject Matter Experts and governance forums to bring clarity to priorities and help decisions move forward.

What You Can Expect Here

You will work in a collaborative, supportive environment where your expertise shapes decisions at the most senior levels of the organisation. You will be trusted to take ownership, make your voice heard and grow your impact across the value chain, while working with colleagues who combine curiosity, collaboration and ambition to keep information security a vital part of Novo's business.

What We Offer

At Novo, you'll join a global healthcare company with a unique culture and strong results. We offer continuous learning, career development, and benefits tailored to your life and career stage.

Salary

For this role, the Annual Base Salary ranges from 847,000.00 to 1,245,100.00 DKK, corresponding to the level of the position. The placement within the salary range will be assessed during the recruitment process based on the candidate's skills, competencies, knowledge, and relevant experience.

Incentives and Benefits

The salary package may include short-term and/or long-term incentives as well as other employee benefits based on position level, location, functional area and relevant market benchmarks.

We commit to an inclusive recruitment process and equality of opportunity for all our job applicants.