About This Role
Building an Information Security Management System (ISMS) that is practical and user-friendly is at the heart of this role. As an Information Security Specialist at COWI, you will work at the intersection of cybersecurity, risk management, business operations, and digital transformation, playing a key role in strengthening trust, resilience, and security across the global business.
Responsibilities
- Develop and simplify ISMS policies, processes, controls, and documentation to improve security outcomes and increase business adoption.
- Drive initiatives related to ISO 27001, applicable regulations, and customer requirements.
- Support internal and external audits and follow identified improvement actions through to completion.
- Advise project teams, business stakeholders, system owners, and IT colleagues on information security requirements and practical ways of managing risk.
- Support management reporting and governance activities by measuring and communicating the effectiveness of the security framework.
- Contribute to awareness and engagement activities that strengthen COWI's security culture and support secure ways of working.
Requirements
- Experience within information security, governance, risk and compliance (GRC), audit, risk management, consulting, or a related field.
- Hands-on experience with information security governance and the implementation of security frameworks, either as an internal specialist or a trusted advisor.
- Ability to balance security requirements with business needs and experience supporting security initiatives across different organizations and stakeholders.
- Capability to independently analyze challenges, identify practical solutions, and work with stakeholders to implement them.
- Structured and methodical work style, seeing initiatives through to completion.
- Ability to translate standards and security requirements into pragmatic and business-oriented solutions.
- Clear and effective communication skills in English.
- Sufficient technical understanding to discuss topics such as identity and access management, cloud services, supplier security, vulnerability management, and business continuity with both technical and non-technical stakeholders.
- Enjoyment in collaborating across organizational boundaries and building strong relationships with colleagues and business stakeholders.
- Solid experience with ISO 27001, NIS2, audits, risk management, or large international organizations.
Benefits
- Private health insurance after the probation period.
- Accident insurance from the first day of employment.
- One extra day off after your birthday.
- Hybrid working conditions.
