Global Information Security Risk Leader

Statkraft; Oslo; On-site; NOK 900,000 - 1,300,000; Full time

Benefits offered by this job

Unlimited learning opportunities

Global network of experts

Flexible working solutions

Competitive terms of employment

Job summary

Statkraft is seeking a Senior Information Security Risk Manager to strengthen the Information Security Management team. You will drive security risk management, governance, and continuous improvement across Statkraft's global operations from Oslo.

You will identify, analyse, treat and monitor information security risks, advise stakeholders, and support development of security governance. Strong communication in English is essential.

Qualifications

• Master's degree or equivalent in information security, cyber security, risk management or related field.
• 5–8 years of experience in information security, IT risk management, governance or compliance.
• Experience conducting security risk assessments and facilitating risk treatment.
• Strong understanding of governance frameworks and standards such as ISO/IEC 27001, ISO/IEC 27005, NIST CSF.
• Experience with senior stakeholders and management; strong English communication.

Responsibilities

• Lead and facilitate information security risk assessments across global processes, systems and services.
• Advise leaders on information security risks and mitigation; support risk-based decisions.
• Maintain risk registers and monitor treatment progress and effectiveness.
• Develop governance practices, report risk landscape to stakeholders, and drive improvements.

Skills

Risk management

Information security

Stakeholder management

Security governance

Risk assessments

Communication

Education

Master's degree in Information Security or related

Tools

ISO 27001

ISO 27005

NIST CSF

Job description

Statkraft is seeking a Senior Information Security Risk Manager to strengthen the Information Security Management team. You will drive security risk management, governance, and continuous improvement across Statkraft's global operations from Oslo.

You will identify, analyse, treat and monitor information security risks, advise stakeholders, and support development of security governance. Strong communication in English is essential.