Information Security Manager

Information Security is an area that is highly prioritized in Milestone. We are rapidly maturing, and you will be a key player in ensuring that we maintain our enterprise-wide ISO27001 compliant Information Security Management System (ISMS).

Together with our CISO, you will be responsible for the governance of the established Information Security Management System (ISMS). You will focus on the Governance, Risk and Compliance area and you will oversee compliance with information security policies, procedures, and controls to ensure the confidentiality, integrity, and availability of Milestones information assets.

You will have a high degree of interaction with your colleagues in Milestone as the role also involves supporting stakeholders on how to implement and interpret the relevant Information Security concepts.

Your key responsibilities will include:

• Maintain and improve our Information Security Management System.
• Drive internal audits and supplier due diligence.
• Ensure that Milestone maintains a proactive continuous improvement mindset.
• Enhance and extend our information security compliance control framework.
• Advice internal stakeholders about Information Security
• Proactively assess information security risks and their potential impact on Milestone.
• Contribute to decision making and drive initiatives coming out of our IT security council.

The Information Security & Compliance team is part of Global IT and we own the Information Security GRC framework, and develop and maintain the Information Security roadmap for Milestone. Furthermore, we develop Information security policies, standards and guidelines and define and execute appropriate oversight of compliance. The function is led by our CISO, whom you will be referencing.

The profile
You do not need to be an established IT security expert to succeed in this role, but you must be able to understand and communicate information security and risk-related concepts to technical and nontechnical audiences at various hierarchical levels in Milestone.
Hopefully you also have competencies within most of below:

• Working knowledge of IT Governance, Risk and Compliance (GRC)
• Solid understanding of ISO27001/2/5, ITIL and NIST frameworks.
• Knowledge and understanding of relevant regulatory requirements and their impact on an ISMS (such as NIS2, AI act, Cyber Resilience Act, etc.)
• Excellent written and verbal communication skills, interpersonal and collaborative skills,
• Excellent stakeholder management skills
• Fluent in Danish and English.

If you have relevant professional certifications or experience working as an implementer/auditor of a management system or similar we see this as an added value.

Please note that the position is on-site at our headquarters in Brøndby, Denmark, and requires that you have a valid Danish work visa.

Welcome to Milestone Systems
At Milestone you will experience a positive and welcoming environment with a global and diverse culture. We are more than 50 different nationalities in the Danish office and English is the corporate language.

We have our own gym with all the equipment you need, private health insurance and additional benefits like an amazing employee association setting up fun and exciting activities for all of us.

If you want to develop your professional competencies we offer individual development plans, where you and your manager agree on the right learning path for you. We believe in investing in our employees and providing them with opportunities for growth and development.

As our office is 5 minutes cycling from the nearest train station, we have bicycles that you can use.

We also have a flexible policy in terms of working from home.

Contact and application
You will experience an inclusive and unbiased recruitment process where all employment decisions are based on qualifications rather than race, color, ethnicity, gender identity, age, sexual orientation, and religion. We advise you not to attach a cover letter to your application but instead, we encourage you to write a few lines about why you are applying for the position in your resume/CV. Additionally we recommend you not to add a photo in your resume/CV.

If you have any questions, you are very welcome to contact CISO, Niels Petersen at +45 5125 1044.

We will take candidates into the recruitment process continuously and the position will remain open until a suitable candidate has been found.

We are looking forward to receiving your application.

Location:
Copenhagen, Denmark