ISMS Lead – Information Security & NIS 2 Compliance (Energy Sector)
We are looking for a senior Information Security professional to lead the completion and implementation of a revised Information Security Management System (ISMS) in a large, complex organisation in the energy sector.
The work is part of a NIS 2 compliance programme and focuses on turning regulatory obligations into one unified framework of requirements that can be implemented and run in practice.
Key responsibilities and deliverables
- Lead the facilitation of stakeholder reviews of the revised ISMS
- Develop an organisational change management plan for implementation, including communication
- Develop an ISMS operating model describing how the ISMS is implemented and run across 1st and 2nd line
Must have
- Extensive experience working with and leading the implementation of an ISMS and ISO 27001 in a complex organisation, including stakeholder review
- Expert knowledge of stakeholder engagement and facilitation
- Senior-level experience driving NIS 2 implementation and achieving compliance through the ISO 27000 framework
- Minimum five years of relevant experience, including proven experience managing IT projects and technical teams
- Experience with projects in an operational environment context (factories and similar OT areas)
- Strong stakeholder management and communication skills
- Experience with agile ways of working, test/release management and process design
Nice to have
- Has led one or more organisations to ISO 27001 certification (highly preferred)
- Extensive IT operations experience, to understand business priorities and implementation challenges in 1st line and translate policy requirements into concrete implementation rules and guidelines (strongly preferred)
- Experience with energy-generating assets, offshore energy and/or engineering
Key competencies
- ISMS and ISO 27001 implementation
- NIS 2 compliance
- Stakeholder engagement and facilitation
- Organisational change management and communication
- Security operating model design (1st and 2nd line)
- Process design and IT project leadership
Practical
- Location: Gentofte (minimum 3 days per week on site)
- Please apply as soon as possible, and no later than noon 11/11.
- Only candidates residing in Denmark already will be considered by our client