Sr Information Security Advisor, Risk Management & Reporting

Location Ballerup, Denmark Job category Enterprise IT & Quality Your impact begins here As Senior Information Security Advisor, you will strengthen how information security risks are identified, understood and reported across Novo. You will turn complex risk information into clear insight that leaders and risk owners can act on, helping the business make well-informed decisions at pace. Your work will help protect Novo's ability to keep serving people living with serious chronic diseases worldwide. What You'll Bring To help leaders make confident, risk-informed decisions, you bring:

• 10+ years of experience within Information Security, Governance, Risk Management or a related discipline, preferably in a large global organisation
• Hands-on experience facilitating and conducting risk assessments in a complex organisational environment
• Experience developing risk reporting and presenting findings to senior stakeholders
• Strong knowledge of information security principles, risk management and industry frameworks such as ISO 27001 / 27002, ISO 27036, NIST CSF and SOC 2 audit reporting
• Excellent stakeholder management, communication and facilitation skills

Useful, But Not Essential Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, or equivalent information security and risk management certifications. What You'll Do You will act as a trusted advisor to business leaders, risk owners, project teams and governance forums, and you will report to top management. Your focus will be to:

• Facilitate the IT/OT and information security risk process across Novo, supporting the business to identify, assess, manage and report risks
• Drive and continuously improve the IT/OT and information security risk management framework, methodologies and supporting processes
• Prepare high-quality reporting materials for leadership teams, governance forums and senior management
• Communicate complex risk information in a clear, concise and business-relevant way
• Promote a strong, proactive risk culture across the organisation
• Support the integration of information security risks into broader enterprise risk management and governance processes

Who You'll Work With In Enterprise IT & Quality, colleagues work across the Novo value chain, staying close to stakeholders and helping deliver trusted technology, high quality and responsible ways of working. You will join the Cyber Risk & Resilience department within Infrastructure and Information Security, focused on Governance, Compliance and Assurance, and Risk Management – including Corporate Governance, ISMS management, Board Risk Reporting, Regulatory Compliance and Third-Party Risk Management. You will work alongside skilled professionals who support each other informally and collaborate closely to deliver high-quality work, including support to the Novo CISO and Top Management. Day to day, you will partner with business leaders, risk owners, Subject Matter Experts and governance forums to bring clarity to priorities and help decisions move forward. What You Can Expect Here You will work in a collaborative, supportive environment where your expertise shapes decisions at the most senior levels of the organisation. You will be trusted to take ownership, make your voice heard and grow your impact across the value chain, while working with colleagues who combine curiosity, collaboration and ambition to keep information security a vital part of Novo's business. What We Offer At Novo, you'll join a global healthcare company with a unique culture and strong results. We offer continuous learning, career development, and benefits tailored to your life and career stage. Salary: For this role, the Annual Base Salary ranges from 847,000.00 to 1,245,100.00 DKK, corresponding to the level of the position. The placement within the salary range will be assessed during the recruitment process based on the candidate's skills, competencies, knowledge, and relevant experience. Incentives and Benefits: The salary package may include short-term and/or long-term incentives as well as other employee benefits based on position level, location, functional area and relevant market benchmarks. Learn more about our Reward Philosophy here. Start now Your impact begins today. If you are ready to turn complex risk into clear insight that guides decisions across a global organisation, apply for the Senior Information Security Advisor, Risk Management & Reporting role by 5 October 2026. Applications are reviewed on an ongoing basis, so we encourage you to apply as soon as possible. For more information about the role, please contact Caroline Viola Lester at CVLE@novonordisk.com or +45 30 75 46 34. We commit to an inclusive recruitment process and equality of opportunity for all our job applicants.