Lead Consultant – Vulnerability Management

Can you translate complex technical security requirements into something the business understands and acts on - and challenge where necessary? Energinet is seeking a highly skilled cyber security professional to join our Attack Surface Management team within the Group Cyber and Information Security unit. You will be the link between the department's technical specialists and the rest of Energinet and ensure that security requirements are both understood, prioritised and complied with. You combine solid technical insight with clear communication and business understanding. You present innovative ideas with confidence, along with the presence and authority to guide decisions. Key Responsibilities

• Oversee the operation and continual improvement of enterprise vulnerability management capabilities across IT, cloud, and hybrid environments.
• Build, maintain, and optimize vulnerability scanning infrastructure, configurations, policies, and workflows.
• Develop scalable vulnerability assessment processes covering infrastructure, endpoints, servers, applications, cloud workloads, containers, and identities.
• Ensure accurate asset discovery, coverage validation, and vulnerability visibility across the enterprise.
• Manage lifecycle vulnerability processes from detection through validation, prioritization, remediation, and closure.
• Establish metrics and performance indicators to measure remediation effectiveness and risk reduction outcomes.
• Analyze attack paths, exposure chains, and security control weaknesses that could contribute to organizational risk.
• Develop risk-based methodologies for prioritizing exposures based on exploitability, business criticality, threat intelligence, and operational impact.
• Support continuous assessment of the organization's security posture through exposure analytics and attack surface monitoring.
• Serve as the technical owner and subject matter expert for vulnerability and exposure management platforms.

“We offer a job with a high level of professionalism and great societal significance, where you help protect Denmark's critical energy infrastructure. You will have skilled colleagues, good opportunities for professional development and flexibility in everyday life – in an organization that is growing and where cyber security is a high priority.” – Arpan Roy, Director, Attack Surface Management. We expect you to

• Have a solid technical understanding in cyber and information security and can go in-depth with technical solutions.
• Have CISSP or an equivalent certification (e.g. CISM) - or are close to earning it.
• Is an effective communicator who can communicate complex requirements clearly to both technicians, project managers and management.
• Works in a structured way and projects professional authority.
• Have business understanding and the ability to question constructively and create progress.
• Be fluent in English at a high level in writing and speech. Danish proficiency is an advantage but not mandatory.

About the department At our office in Ballerup or Fredericia, you will be part of Attack Surface Management - a new department under the Group Cyber and Information Security unit. The department is responsible for the technical protection layers that reduce Energinet's attack surface. Together with the other departments in Cyber and Information Security, we are responsible for developing and operating the organizational processes and technologies within cyber and information security in Energinet and for coordinating the IT preparedness in the electricity, gas and hydrogen sectors. Want to know more? If you have any questions about the job, you are very welcome to contact Arpan Roy at arroy@energinet.dk or on tel. +45 5161 2898. We review applications and conduct interviews on an ongoing basis, so please send us your motivated cv as soon as possible. Special conditions: As Energinet performs tasks critical to society, we carry out background checks prior to employment. Employment is conditional upon your background check being compatible with employment at Energinet. The background check is also carried out once a year. The position also requires that you are able to obtain and maintain security clearance. On PET's website, you can read more about security clearance. We see diversity as a strength and encourage all qualified people, regardless of background, to apply for the job. We work actively and determinedly with diversity in Energinet and therefore encourage you to exclude information about age, marital status, etc. to minimise outage biases in the process. You can read more about our diversity policy here. Energinet is an independent public company that reprecents society's interests when supplying Denmark with electricity and gas and that the energy system is converted to green energy. Our culture is closely linked to our social responsibility, and we work actively with the UN's global goals on sustainable energy, climate action, partnerships for action as well as industry, innovation, and infrastructure. By leading the way in the green transition, we can help to solve the global climate challenge. New solutions require us to be able to see problems from many different angles, and diversity is therefore a keyword in our culture. We strive to listen to, involve and share our knowledge. Based on the values of courage and trust, we focus on constantly developing ourselves as an organisation and as people. Read more at our website www.energinet.dk. Se film om Energinet. Work hours Workplace Fredericia, Ballerup Contact Arpan Roy Director +45 5161 2898