Senior Information Security Risk & Governance Lead

Statkraft; Oslo; On-site; NOK 1,100,000 - 1,500,000; Full time

Benefits offered by this job

Unlimited learning opportunities

Global network of experts

Flexible working arrangements

Competitive terms of employment

Job summary

Statkraft is seeking a Senior Information Security Risk Manager to strengthen the Information Security Management team and drive risk governance and improvement across its global operations. The role focuses on risk assessment, treatment, and stakeholder advisory across business units and digital teams.

You will develop risk management practices, maintain risk registers, and promote a strong security culture, reporting to the Head of Risk Management within ISM.

Qualifications

• Master's degree or equivalent in information security or related field.
• 5–8 years of experience in information security, risk management, governance, or compliance.
• Experience conducting security risk assessments and facilitating risk treatment.
• Strong knowledge of security governance frameworks and standards (ISO/IEC 27001, ISO/IEC 27005, NIST CSF).
• Excellent communication and presentation skills in English.

Responsibilities

• Lead and facilitate information security risk assessments across global processes, systems, and services.
• Advise leaders on information security risks and mitigation strategies for informed risk-based decisions.
• Maintain risk registers and monitor treatment progress and effectiveness of controls.
• Report on evolving risk landscape to key stakeholders and drive continuous improvement of methodologies.
• Develop and deliver security governance practices and risk awareness across the organization.

Skills

Stakeholder management

Communication

Analytical thinking

Strategic thinking

Risk management

Education

Master's degree in Information Security

Tools

ISO/IEC 27001

NIST Cybersecurity Framework

ISO/IEC 27005

Job description

Statkraft is seeking a Senior Information Security Risk Manager to strengthen the Information Security Management team and drive risk governance and improvement across its global operations. The role focuses on risk assessment, treatment, and stakeholder advisory across business units and digital teams.

You will develop risk management practices, maintain risk registers, and promote a strong security culture, reporting to the Head of Risk Management within ISM.