Strategic InfoSec Risk & Reporting Lead

Novo Nordisk A/S; Ballerup; Remote; DKK 847,000 - 1,245,000; Full time

Job summary

Novo Nordisk A/S in Denmark is seeking a Senior Information Security Advisor for Risk Management & Reporting to strengthen our cyber risk governance. You will oversee IT/OT risk processes, drive the risk framework, and prepare leadership reports.

You will collaborate with risk owners, the CISO, and governance forums to translate complex security findings into actionable business insights. The role emphasizes independent judgment, proactive risk culture, and close partnership with

Qualifications

• 10+ years of experience within Information Security, Governance, Risk Management or a related discipline.
• Hands-on experience facilitating and conducting risk assessments in a complex organisational environment.
• Experience developing risk reporting and presenting findings to senior stakeholders.
• Strong knowledge of information security principles, risk management and industry frameworks such as ISO 27001/27002, ISO 27036, NIST CSF and SOC 2 audit reporting.
• Excellent stakeholder management, communication and facilitation skills.

Responsibilities

• Facilitate the IT/OT and information security risk process across Novo Nordisk A/S, supporting the business to identify, assess, manage and report risks.
• Drive and continuously improve the IT/OT and information security risk management framework, methodologies and supporting processes.
• Prepare high-quality reporting materials for leadership teams, governance forums and senior management.
• Communicate complex risk information in a clear, concise and business-relevant way.
• Promote a strong, proactive risk culture across the organisation.
• Support the integration of information security risks into broader enterprise risk management and governance processes.

Skills

Risk assessment

Risk reporting

Stakeholder management

Communication

Information security principles

Education

CISSP

CISM

CRISC

ISO 27001 Lead Auditor/Implementer

Job description

Novo Nordisk A/S in Denmark is seeking a Senior Information Security Advisor for Risk Management & Reporting to strengthen our cyber risk governance. You will oversee IT/OT risk processes, drive the risk framework, and prepare leadership reports.

You will collaborate with risk owners, the CISO, and governance forums to translate complex security findings into actionable business insights. The role emphasizes independent judgment, proactive risk culture, and close partnership with