Senior Manager Information Compliance – Information Security Governance

DENMARK Senior Manager Information Compliance – Information Security Governance In Denmark - Copenhagen Help shape how Simon-Kucher protects client and firm information. You will work closely with the Information Security Officer (ISO) and IT Security to turn security risks and business needs into workable policies, control requirements and governance processes. IT Security remains responsible for technical design, implementation and operation of security controls. This is a hands-on governance role, not a security-operations position. You will own defined workstreams, support risk-based decisions and challenge implementation constructively. As the function develops, the scope of the role may broaden. What makes us special:

• Become part of a unique entrepreneurial team. Think independently, use your initiative, and take some risks. Entrepreneurship is a powerful force that drives the growth not only of our firm but our clients and people.
• Unlock the power of opportunity. Advance your career in a thriving company that creates positive impact. We invest in your professional development every step of the way.
• Enjoy balance and flexible working. Be empowered to do your best work – whether it’s remotely or in the office.
• Prioritize your health and wellbeing. No matter where you live, we offer a competitive suite of health benefits to help keep you and your loved ones safe.
• Work in a values-driven culture. At Simon-Kucher, our vision is to become the world's leading growth specialist. Our values guide the way we do business and communicate our distinctiveness. They sum up what we stand for, influence our culture, and drive how and why we do things.

How you will create an impact:

• Own a defined security-governance portfolio and keep policies, minimum control requirements, process standards and practical guidance current and usable.
• Maintain and improve security risk-assessment and exception processes, working with IT and business owners to document treatment options, ownership and decisions.
• Strengthen the ISMS, including ISO/IEC 27001 governance, control mappings, evidence requirements and management-review inputs.
• Translate governance requirements into practical implementation guidance for identity and privileged access, infrastructure, cloud and SaaS, supplier security, client projects, application security, data handling, vulnerability management and incident governance.
• Provide second-line oversight by reviewing adherence, evidence and exceptions, following up with risk and control owners and escalating material gaps where needed.
• Advise the business on security requirements and contribute to consistent client-assurance responses, working with Privacy, AI Governance, Legal and Procurement where topics overlap.
• Contribute to security priorities, roadmap and management reporting, including recommendations on investments based on risk, demand and business impact.
• Improve policy, evidence, exception and reporting workflows using governance, risk and compliance (GRC) tools, automation and approved AI where these add value.

Your profile:

• Typically seven or more years in information security, security governance, technology risk or a closely related field, with independent ownership of significant governance, policy or risk-management work.
• Strong working knowledge of ISO/IEC 27001 and an ISMS, and experience applying NIST CSF or comparable frameworks in a proportionate way.
• A practical understanding of security architecture and operations, including access controls, cloud, vulnerability management and incident response. Prior engineering or operational security experience is useful but not required.
• Evidence that you have built and embedded policies or governance processes and improved risk decisions, control ownership or implementation.
• The ability to work with technical specialists and senior business stakeholders, resolve unclear ownership and challenge decisions with evidence rather than hierarchy.
• Experience setting priorities, presenting trade-offs and leading cross-functional change. Experience developing colleagues is useful.
• Excellent written and spoken English. CISM, CISSP, CRISC or relevant ISO 27001 qualifications are useful but not mandatory. Danish is not required.
• Experience in international professional services, client security assurance, supplier risk, privacy or AI governance, TISAX, SOC 2, GRC tooling or workflow automation would be useful, but is not essential.

If you’re interested, and if you’d like to offer your skills and commitment to our international team, then we would be pleased to receive your application. Hit the ‘Apply Now’ button to begin your application. Please note that, for data protection reasons, we cannot accept applications via email. About Simon-Kucher Simon-Kucher is a global consultancy with more than 2,200 employees in 30+ countries. Our sole focus is on unlocking better growth that drives measurable revenue and profit for our clients. As a trusted commercial advisor, we combine deep consulting expertise, growth specialization, and technology to scale impact. We optimize every lever of commercial strategy – product, pricing, innovation, marketing, sales, and digital – based on deep insights into what customers value and are willing to pay for. With over 40 years of experience in monetization, we are regarded as the world’s leading commercial growth and pricing specialist. simon-kucher.com We believe in building a culture that embraces diversity, equity, and inclusion, creating an environment in which our people feel valued, are able to be themselves and feel their contribution matters. If we get that right, remarkable things will happen; people will grow faster, innovate, feel valued, and create better outcomes for everyone – our people, our clients and, of course, our business. Your personal contact: Name Name.Name@simon-kucher.com