GRC Security Specialist - Risk, Policy & Compliance

TOMRA; Asker; Hybrid; NOK 700,000 - 900,000; Full time

Job summary

A global technology company in Asker is seeking a GRC specialist. The successful applicant will develop security governance, risk management, and compliance practices, ensuring the protection of their assets. The ideal candidate has a degree in a related field and at least 3 years of experience in information security, with a strong focus on ISO standards and risk management. This role offers a competitive salary, hybrid working conditions, and professional development opportunities.

Benefits

5 extra days holiday at Easter or Christmas

Modern gym facilities

Excellent lunch restaurant

Attractive compensation package

Opportunities for professional development

Qualifications

• Minimum of 3 years of experience in information security, focusing on governance, risk management, and compliance.
• Strong knowledge of security frameworks and standards.
• Relevant certifications such as ISO 27001 or CISM / CISA are highly desirable.

Responsibilities

• Develop and implement security policies and standards for compliance.
• Conduct risk assessments and develop risk mitigation strategies.
• Monitor effectiveness of the security program and drive improvements.

Skills

Information Security

Governance

Risk Management

Compliance

Communication skills

Education

Bachelor's degree in Information Security, Computer Science, or related field

Tools

ISO/IEC 27001

NIST

ISF Standard of Good Practice

Job description

A global technology company in Asker is seeking a GRC specialist. The successful applicant will develop security governance, risk management, and compliance practices, ensuring the protection of their assets. The ideal candidate has a degree in a related field and at least 3 years of experience in information security, with a strong focus on ISO standards and risk management. This role offers a competitive salary, hybrid working conditions, and professional development opportunities.