Information Security Lead

Ardoq LLC; Oslo fylke; Hybrid; NOK 1,000,000 - 1,500,000; Full time

Benefits offered by this job

Stock options

25 days annual leave globally

Parental leave enhancements

Retirement and insurance benefits

Annual learning budget

Hybrid working policy

Job summary

Ardoq is seeking an Information Security Lead to own the security voice for Sales and customers. You will build and run the trust center, ensuring accurate, actionable responses while coordinating with CISO and Engineering to reflect the product and security reality.

You will contribute to ISMS and related processes, driving smoother deal cycles and confident buyer engagement through practical, compliant security communications and automation where appropriate.

Qualifications

• Proven track record in information security governance and compliance, with hands-on SOC 2 experience.
• SOC 2 and ISO 27001 exposure is essential to this role in a SaaS environment.
• Experience in live customer security conversations and risk framing to support sales.
• Comfort with ambiguity and ability to build from the ground up in a fast-moving company.
• Experience handling security questionnaires, contract terms, and enablement tooling.

Responsibilities

• Own customer trust as the primary security contact for Sales throughout the deal cycle.
• Review security terms in contracts with cross-functional teams and flag real risk.
• Build and maintain the customer trust center and approved answers, leveraging automation.
• Coach commercial teams on communicating security and compliance effectively.
• Develop and maintain ISMS and GRC activities to align with security controls.
• Update the trust center and knowledge base with current responses to customers.
• Identify recurring questions and feed insights to Security, Engineering, Product, and Sales enablement.
• Improve workflows and AI-assisted drafts to speed up accurate responses.

Skills

Security governance

SOC 2

ISO 27001

Security conversations

Automation/AI tooling

Risk framing

Stakeholder communication

Job description

Information Security Lead at Ardoq

Ensuring every Ardoq customer a clear, honest answer to “can we trust you with our data?”

The Ardoq Story

Ardoq is one of Norway’s most exciting scale-ups - a truly global company built out of Oslo. We are a SaaS platform that helps organizations understand, manage, and evolve their complex digital landscape. By providing a dynamic, collaborative "digital twin" of their business, we connect systems, people, and processes to drive better decision-making and accelerate digital transformation.

Today, we help some of the world’s most complex organizations (like ExxonMobil and British Telecom) gain clarity in a changing world. We are backed by leading global tech investors, including EQT and One Peak, giving us the stability of a mature company with the speed and soul of a startup.

About the Role

Large enterprise deals come with hard security questions, and how quickly and honestly we answer them decides whether a buyer trusts us. This role exists to own that answer: you are the security voice for Sales and customers, you build and run our trust center, and you turn the work of our security team into material buyers can actually use. You also run the internal process behind gathering those answers, working with the CISO and Engineering so what we tell customers is accurate. When you are not responding to commercial needs you are a contributor to our Information Security Management System (ISMS) and related processes, ensuring Ardoq lives up to its security and compliance commitments. Your impact shows up in smoother deal cycles and in customers who feel confident, not just informed.

What you’ll do

• Own customer trust: Be the primary security contact for Sales through the deal cycle, and take on the complex, high-value questionnaires and assessments yourself so buyers get accurate answers they can rely on.

• Partner across the business: Work with Sales, Customer Success, Legal, Engineering and Operations to review security terms in customer contracts, flag real risk, and keep security processes practical for the people who use them.

• Build the foundation for trust: Own and maintain Ardoq’s customer trust center and a library of approved answers, use automation and AI where they remove friction, and feed the themes customers keep raising back into product, engineering and sales enablement.

• Coach the commercial teams on communicating security and compliance: Help foster a high-performance culture built on mentorship and collective success.

On a typical day, you will

• Pick up the security questions waiting from Sales, prioritise the queue, and take the complex or high-value deals.

• Join customer calls to explain technical controls in plain language a buyer can trust, without promising more than Ardoq can deliver.

• Work with Engineering and other teams to correctly describe our secure development processes and architecture, so our responses to customers match how we build and run the product.

• Contribute to our internal ISMS and GRC activities, so what customers are told matches how our controls work.

• Review customer contracts with Legal and identify and assess customer security requirements against our existing ways of working.

• Update the trust center and commercial knowledge base so that answers stay current and address new customer questions.

• Coach sales or Customer Success so routine questions get answered on the first reply.

• Spot a pattern in what customers keep asking and take it to Security, Engineering, Product and Sales enablement.

• Improve a workflow or an AI-assisted draft so answers get faster and stay accurate.

Who you are

We are looking for a collaborator who balances deep domain expertise with a humble, "team-first" mindset.

• You have a proven track record in information security governance and compliance, with hands-on SOC 2 and ISO 27001 experience, ideally within a high-growth SaaS or tech environment.

• You have experience in live customer security conversations, and can frame the discussion in the context of risk.

• You are comfortable with ambiguity and enjoy the challenge of building from the ground up.

• You are proficient in security frameworks and secure development practices. You are comfortable with handling customer security questionnaires, contract terms and automation or AI-assisted tooling, and are always curious about learning what’s next.

• You have owned or have experience with similar processes from before, and are motivated to constantly improve the efficiency for all parties involved.

• You can translate complex ideas into clear, actionable plans for stakeholders at all levels.

The "Ardoq Way"

We live by three values - Bold, Caring, and Driven - that define how we work, how we treat each other, and how we win.

• BOLD: We continuously raise the bar for ourselves and each other, starting from a place of "what if I could?" We act decisively, even when the information isn't complete, and choose forward motion and learning over waiting for the perfect answer.

• CARING: We care enough to be candid. That means delivering direct, kind, and timely feedback that helps our teammates grow. We operate as one team - sharing knowledge openly, celebrating each other's wins, and putting collective success ahead of individual ones.

• DRIVEN: At Ardoq, everyone has a stake in the outcome - including stock options. We act like owners: measuring success by impact rather than effort, saying "no" to distractions, and staying focused on the highest-value work at pace.

Why Ardoq?

We believe that high performance is powered by wellbeing. You’ll have access to a competitive package that supports performance, wellbeing, and long-term success.

• Employee Stock Options - share in Ardoq’s success as we grow together

• 25 days annual leave offered globally

• Enhanced parental leave available globally to support you and your family

• Retirement and insurance benefits, including travel, health, disability and life insurance

• Annual learning budget to support your growth and development

• A hybrid working policy: 2-3 days per week from our Oslo Headquarters.

Final Note

At Ardoq, every teammate has a voice. Whether you love tackling enterprise-scale challenges or improving how companies run, you’ll not only belong, you’ll impact, grow, and make work meaningful.

#LI-Hybrid