GRC Specialist - Netcompany Group CISO Office

Job Description

Do you want to help shape how a large IT company measures, manages and documents its information security? Are you motivated by turning data, risk and regulation into practical decisions? If so, you may be our next colleague in the newly established GRC team in Netcompany's Group CISO Office.

Responsibilities and technologies

As a member of the GRC team, you will help ensure that Netcompany has an accurate, data-driven view of the effectiveness of its security controls and its level of compliance. The team takes a pragmatic and technically grounded approach to governance, risk and compliance, and works closely with the Application Security team, the Operations organisation, Internal IT and other business functions across the group.

The GRC team is a small team of colleagues with complementary profiles. We do not expect any one candidate to cover every area described below. Instead, we are looking for broad profiles with solid experience across several of these areas and the motivation to develop within the rest.

Your responsibilites will typically include:

• Developing and maintaining risk scenarios, assessing the effectiveness of mitigating controls against the scenarios, and conducting risk assessments to support business decisions
• Establishing automated measurements and KPIs that provide insight into the implementation and effectiveness of security controls across the business
• Interpreting regulatory and contractual security requirements and translating these into Netcompany's security baselines and standard methodologies
• Planning and executing security awareness activities, including phishing simulations, targeted micro-learning, and onboarding/yearly awareness training
• Driving smaller security improvement projects from planning to implementation, combining coordination with hands-on execution
• Developing, maintaining and testing internal security processes, such as major incident response, crisis management and business continuityDeveloping, maintaining and testing internal security processes, such as major incident response, crisis management and business continuity

About you

You have broad experience within information security and a solid understanding of its technical aspects alongside a general understanding of the software development life cycle. You combine this with the ability to translate regulatory requirements into practical solutions. Furthermore, you are pragmatic, take ownership of your work and prefer a hands-on approach.

To succeed in this role you: 

• Hold a relevant degree or equivalent experience; within IT, engineering, computer science or a similar field.
• Strong analytic skills, with the ability to interpret data and draw meaningful conclusions independently.
• Experience within several of the areas listed in the overview of responsibilities in the role.
• Solid communication and collaboration skills, with the ability to engage effectively with technical teams, business functions, management and, on occasion, customers.
• Full professional proficiency in Danish and English (written and spoken).

Continue developing with us
At Netcompany, we focus on your personal and professional development.

We provide a structured career model that allows you to build on your existing experiences. 

When you join us, you will be assigned a personal mentor who will support your development and help you achieve your personal and professional goals. The close relationship with an experienced colleague in management gives you concrete insights into the various business areas and responsibilities that match your interests and desires. 

Additionally, you will be enrolled in our internal training programme, Netcompany Academy, where you are offered courses and seminars tailored to you and where you are in your career. All courses are taught by experienced Netcompany colleagues, ensuring that all content is highly relevant and builds upon your professional skills. Participating alongside colleagues from across the company helps you build a solid network and provides a strong foundation for your career at Netcompany, both professionally and socially.

Join an inclusive community 

At Netcompany, we highly prioritise an inclusive community. We actively promote an open and welcoming work culture based on collaboration and mutual trust, where there is always an opportunity for sparring. 

As part of our culture and values, all employees, regardless of background, identity, and experience, are met with understanding and respect and given equal opportunities for development and well-being.

As we are an international company with offices in many countries, you will have the opportunity to learn and collaborate internationally with colleagues from across the world. We offer a shared environment where we engage with each other across departments and projects. Additionally, we have a wide range of social and professional events that provide you with the best opportunities to expand your network. 

Send us an application

Upload your resume and a motivational letter to our recruitment system via the link. If you have unanswered questions, feel free to write to [email protected].

All qualified candidates are encouraged to apply regardless of gender, gender expression, sexuality, disability, age, religion and belief, political views, nationality, ethnicity, or social background.

We are committed to creating an inclusive and diverse environment. Our recruitment processes are based on individual merit. If you require any reasonable adjustments or additional support during the interview process, please email our recruiters at [email protected] for assistance. #LI-SA1

Qualifications

Additional Information