Sr Information Security Advisor, Third Party Risk Management

Novo Nordisk A/S; Ballerup; Remote; DKK 743,000 - 1,092,000; Full time

Job summary

Novo Nordisk A/S in Denmark seeks a Senior Information Security Advisor to lead and mature the Third-Party Risk Management programme. You will ensure security, resilience and regulatory risks tied to suppliers are identified, assessed and managed across the supplier lifecycle, strengthening Novo's supply chain security.

Join a global team within Infrastructure and Information Security, collaborating with Procurement, Legal and business partners to embed security into procurement and contracts

Qualifications

• Minimum 10+ years in information security with Third-Party Risk Management.
• Hands-on experience conducting supplier security assessments and due diligence.
• Knowledge of ISO 27001/27002, ISO 27036, NIST CSF and SOC 2 audit reporting.
• Understanding of regulatory requirements affecting third-party and supply chain security (NIS2).
• Excellent stakeholder management and collaboration across diverse teams.

Responsibilities

• Develop and mature the TPRM programme, embedding security in procurement, ISMS and enterprise risk management.
• Contribute to governance, processes, methodologies, reporting and tooling for TPRM.
• Ensure alignment with Novo security requirements and regulatory obligations including NIS2.
• Integrate third-party security requirements into procurement, sourcing, contracting and lifecycle management.
• Advise contract owners on security requirements and risk treatment, supporting mitigations.
• Collaborate across business and technology to strengthen supply chain security and monitor supplier compliance.

Skills

Information security

Supplier risk assessments

InfoSec frameworks

Regulatory requirements (NIS2)

Stakeholder management

Team collaboration

Job description

Select how often (in days) to receive an alert: Create Alert

Sr Information Security Advisor, Third Party Risk Management

Category: Digital & IT

Location: Ballerup, Capital Region of Denmark, DK

Location

Job category

Your impact begins here

As Senior Information Security Advisor, you will lead and mature Novo's Third-Party Risk Management programme, making sure the information security, operational resilience and regulatory risks tied to suppliers and external partners are identified, assessed and managed across the supplier lifecycle. Your work strengthens supply chain security today, protecting the company information, systems and services that keep Novo delivering for people living with serious chronic diseases.

What you'll bring

• 10+ years of experience in Information Security, including significant hands-on Third-Party Risk Management in large, global organisations.
• Practical experience conducting supplier security assessments, due diligence activities and risk evaluations.
• Strong knowledge of information security principles, risk management and industry frameworks such as ISO 27001 / 27002, ISO 27036, NIST CSF and SOC 2 audit reporting.
• An understanding of regulatory and industry requirements affecting third-party and supply chain security, including NIS2 and other relevant cybersecurity obligations.
• Excellent stakeholder management, communication, facilitation and influencing skills, with the ability to collaborate across diverse business and technology teams and drive change without direct authority.
• A team-player mindset built on support and collaboration.

Useful, but not essential:

Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor / Implementer, or equivalent information security and risk management certifications.

What you'll do

You will drive and continuously mature the TPRM programme, embedding security requirements into procurement, the ISMS framework and enterprise risk management, and advising on critical and high-risk supplier engagements.

• Contribute to the ongoing development of TPRM governance, processes, methodologies, reporting and tooling.
• Keep the programme aligned with Novo security requirements, legal and regulatory obligations including NIS2, industry standards and enterprise risk management practices.
• Integrate third-party security requirements into procurement, sourcing, contracting, supplier onboarding and lifecycle management.
• Advise contract owners and stakeholders on security requirements, supplier risk treatment and regulatory obligations, and support the implementation of contractual security requirements and mitigation plans.
• Collaborate across business and technology areas to strengthen supply chain security and reduce third-party risk exposure.
• Monitor supplier security and compliance performance and facilitate reassessment activities.

Who you'll work with

You will join the Cyber, Risk & Resilience team within Infrastructure and Information Security, focused on governance, compliance and assurance, and risk management. The team spans corporate governance, ISMS management, board risk reporting, regulatory compliance and Third-Party Risk Management, supporting the Novo CISO and Top Management with high-quality deliveries.

Your closest partners will be business stakeholders, Procurement, Legal and the broader Information Security team, alongside external partners and suppliers. This is a collaborative group that supports one another informally and works together to make information security a vital part of Novo's business. Bringing clarity and momentum across these relationships is how you will reduce risk and move work forward.

What you can expect here

You will work in a global environment where your expertise shapes how Novo manages supplier and supply chain risk. You will be trusted to take ownership, make your voice heard and drive change, while being supported to keep growing through cross-functional collaboration and continuous learning.

What we offer

At Novo, you'll join a global healthcare company with a distinctive culture and strong results, with career development and benefits tailored to your life and career stage.

Salary

For this role, the Annual Base Salary ranges from 742,600.00 to 1,091,600.00 DKK, corresponding to the level of the position. The placement

Within the salary range will be assessed during the recruitment process based on the candidate's skills, competencies, knowledge and relevant experience.

Incentives and Benefits

The salary package may include short-term and/or long-term incentives as well as other employee benefits based on position level, location, functional area and relevant market benchmarks.

Learn more about our Reward Philosophy here.

For more information about the role, please contact Ronnie Lykke Madsen at [phone].

We commit to an inclusive recruitment process and equality of opportunity for all our job applicants.