GRC Specialist, Netcompany Group CISO Office

Netcompany; United States; À distance; USD 100 000 - 170 000; Plein temps

Avantages offerts par ce poste

Mentor program

Netcompany Academy

Inclusive work culture

Résumé du poste

Netcompany Group is expanding its GRC team in the Group CISO Office and seeks a GRC Specialist with a pragmatic, hands-on approach. You will help shape how the organization measures, manages, and documents information security, working closely with Application Security, Internal IT, and other business functions.

You will develop risk scenarios, create KPIs, interpret regulatory requirements, and participate in security awareness initiatives.

Qualifications

• Broad information security experience across several areas.
• Ability to translate regulatory requirements into practical solutions.
• Strong communication and collaboration with technical and business teams.

Responsabilités

• Develop and maintain risk scenarios and assess mitigating controls.
• Establish automated measurements and KPIs for security controls.
• Interpret regulatory requirements and translate into baselines and methodologies.
• Lead security awareness activities and phishing simulations.
• Drive security improvement projects from planning to implementation.

Connaissances

Analytical skills

Communication

Collaboration

Bilingual English/ Danish

Formation

Relevant degree in IT/Engineering/CS

Description du poste

GRC Specialist, Netcompany Group CISO Office

Do you want to help shape how a large IT company measures, manages and documents its information security? Are you motivated by turning data, risk and regulation into practical decisions? If so, you may be our next colleague in the newly established GRC team in Netcompany's Group CISO Office.

As a member of the GRC team, you will help ensure that Netcompany has an accurate, data-driven view of the effectiveness of its security controls and its level of compliance. The team takes a pragmatic and technically grounded approach to governance, risk and compliance, and works closely with the Application Security team, the Operations organisation, Internal IT and other business functions across the group.

The GRC team is a small team of colleagues with complementary profiles. We do not expect any one candidate to cover every area described below. Instead, we are looking for broad profiles with solid experience across several of these areas and the motivation to develop within the rest.

• Developing and maintaining risk scenarios, assessing the effectiveness of mitigating controls against the scenarios, and conducting risk assessments to support business decisions
• Establishing automated measurements and KPIs that provide insight into the implementation and effectiveness of security controls across the business
• Interpreting regulatory and contractual security requirements and translating these into Netcompany's security baselines and standard methodologies
• Planning and executing security awareness activities, including phishing simulations, targeted micro-learning, and onboarding/yearly awareness training
• Driving smaller security improvement projects from planning to implementation, combining coordination with hands-on execution
• Hold a relevant degree or equivalent experience; within IT, engineering, computer science or a similar field.
• Strong analytic skills, with the ability to interpret data and draw meaningful conclusions independently.
• Experience within several of the areas listed in the overview of responsibilities in the role.
• Solid communication and collaboration skills, with the ability to engage effectively with technical teams, business functions, management and, on occasion, customers.
• Full professional proficiency in Danish and English (written and spoken).

Continue developing with us

At Netcompany, we focus on your personal and professional development.

We provide a structured career model that allows you to build on your existing experiences.

When you join us, you will be assigned a personal mentor who will support your development and help you achieve your personal and professional goals. The close relationship with an experienced colleague in management gives you concrete insights into the various business areas and responsibilities that match your interests and desires.

Additionally, you will be enrolled in our internal training programme, Netcompany Academy, where you are offered courses and seminars tailored to you and where you are in your career. All courses are taught by experienced Netcompany colleagues, ensuring that all content is highly relevant and builds upon your professional skills. Participating alongside colleagues from across the company helps you build a solid network and provides a strong foundation for your career at Netcompany, both professionally and socially.

Join an inclusive community

At Netcompany, we highly prioritise an inclusive community. We actively promote an open and welcoming work culture based on collaboration and mutual trust, where there is always an opportunity for sparring.

As part of our culture and values, all employees, regardless of background, identity, and experience, are met with understanding and respect and given equal opportunities for development and well-being.

As we are an international company with offices in many countries, you will have the opportunity to learn and collaborate internationally with colleagues from across the world. We offer a shared environment where we engage with each other across departments and projects. Additionally, we have a wide range of social and professional events that provide you with the best opportunities to expand your network.

All qualified candidates are encouraged to apply regardless of gender, gender expression, sexuality, disability, age, religion and belief, political views, nationality, ethnicity, or social background.

We are committed to creating an inclusive and diverse environment. Our recruitment processes are based on individual merit. If you require any reasonable adjustments or additional support during the interview process, please email our recruiters at [e-mail] for assistance.

You have broad experience within information security and a solid understanding of its technical aspects alongside a general understanding of the software development life cycle. You combine this with the ability to translate regulatory requirements into practical solutions. Furthermore, you are pragmatic, take ownership of your work and prefer a hands-on approach.