Global Information Security Risk Leader - Flexible & Growth

Statkraft; Oslo; On-site; NOK 900,000 - 1,200,000; Full time

Benefits offered by this job

Unlimited learning opportunities

Global network of experts

Job summary

Statkraft is seeking a Senior Information Security Risk Manager to strengthen its Information Security Management team and drive security risk management, governance, and continuous improvement across Statkraft's global operations.

As Senior Information Security Risk Manager, you will identify, analyse, treating and monitoring information security risks, act as a trusted adviser to business and technology stakeholders, and help develop security governance practices and a strong security culture

Qualifications

• Master's degree or equivalent in Information Security, Cyber Security, Risk Management, Information Systems, or related discipline.
• Minimum5-8 years of experience within information security, cyber security, IT risk management, governance, or compliance.
• Strong experience conducting security risk assessments and facilitating risk treatment.
• Excellent understanding of security governance frameworks and standards such as ISO/IEC27001, ISO/IEC 27005, NIST Cybersecurity Framework, risk management methodologies and control frameworks.

Responsibilities

• Lead and facilitate information security risk assessments across business processes, systems, and services globally.
• Advise business leaders on information security risks and mitigation strategies and support management in risk-based decisions.
• Maintain risk registers and monitor risk treatment progress and effectiveness of security measures.
• Report on evolving risk landscape to key stakeholders.
• Contribute to continuous improvement of information security methodologies, tools, and processes.
• Develop and deliver security awareness and training initiatives.
• Build strong relationships with stakeholders and translate technical topics into business language.

Skills

Information security

Cyber security

IT risk management

Governance

Compliance

Security risk assessments

Stakeholder management

Communication

Education

Master's degree in Information Security / Cyber Security / Risk Management

Tools

ISO/IEC 27001

ISO/IEC 27005

NIST Cybersecurity Framework

Job description

Statkraft is seeking a Senior Information Security Risk Manager to strengthen its Information Security Management team and drive security risk management, governance, and continuous improvement across Statkraft's global operations.

As Senior Information Security Risk Manager, you will identify, analyse, treating and monitoring information security risks, act as a trusted adviser to business and technology stakeholders, and help develop security governance practices and a strong security culture