Rådgiver innen informasjonssikkerhet - GRC (ISO 27001 / Risikostyring)

Role Summary

Do you want to help secure the digital society of the future?

We are strengthening our investment in secure digitization and are now looking for an advisor in information security. With us, you get to work with information security, risk management and regulatory compliance in projects with great complexity, often at the intersection between IT and OT.

You will be part of interdisciplinary teams and contribute to developing and improving management systems, carrying out maturity assessments, risk analyzes and gap analyses, as well as giving advice related to compliance with regulations such as the Security Act, NIS2, DORA and GDPR. Our customers operate in socially critical sectors such as energy, defence, industry, transport and health. We are looking for someone who is able to combine security knowledge with business understanding.

We want colleagues with different experience, experience and professional weight; from those who have a few years' experience and want to develop further, to those who already have several years' experience and can contribute on a more strategic level.

What the roles have in common is that you have an interest in secure digitalisation, a good understanding of frameworks and regulations, and the ability to translate this into practical and relevant measures for our customers.

It is a plus if you also have

Experience with supplier follow-up or internal audit.

Experience from regulated sectors or OT environments.

Competence in process management or change work.

Requirements

We would like to see that you have

• Higher education at minimum bachelor's level in law, information security, technology, social sciences or equivalent.
• Experience with information security, GRC (governance, risk & compliance), risk work and/or compliance
• Minimum 2-5 years experience, or more for senior roles.
• Knowledge of and experience in using frameworks such as ISO 27001, ISO 27005, NIST SP 800-53 and NSM's basic principles.
• Experience with implementation and operationalization of management systems.
• Good understanding of regulations such as the Security Act, the Personal Data Act and the Digital Security Act.
• Good communication skills in Norwegian, both written and oral.

Benefits

What you get with us

• At AFRY, people work with different backgrounds and experience, and we emphasize a working environment characterized by professionalism, cooperation and trust. We are keen to make thorough assessments, deliver with quality and support each other in everyday life.
• We offer career and development opportunities in a modern workplace, with an international professional environment that provides exciting perspectives and experience. Social activities and an active staff club make it extra fun to be part of the team.
• A committed professional environment with a strong culture for sharing expertise and professional development
• Good career and development opportunities in a modern consultant environment
• An inclusive work environment with little hierarchy and a high degree of trust
• Competitive conditions, flexible working hours and good pension and insurance schemes
• Five weeks' holiday, as well as paid time off in the Christmas and Easter weeks
• Active staff club, social activities and access to company cabins

With us, you should have the opportunity to combine meaningful work, high professionalism and a life alongside work.

Security clearance

• Several of our projects are subject to the Security Act, and it is therefore a requirement that you either have a valid security clearance or are qualified to be cleared to level Secret or higher. You must also be able to be asked to undergo a security check as part of the recruitment process.
• Workplace: Oslo

About the Company

AFRY provides services in engineering, design, digitization and consultancy. We consist of dedicated experts in industry, energy and infrastructure, who create lasting solutions for future generations. AFRY has Nordic roots with a global reach. Our core principles - Results driven, Client Centric, Empowering & Accountable - guide us in how we work, grow and succeed together. Join us in accelerating the transition to a more sustainable society.

We at AFRY Security Advisory deliver security advice throughout the entire life cycle of complex projects, from analysis and assessment to implementation, follow-up and handling. The Nordic region is our home market, and we combine local security expertise with the capacity and ambitions of an international group. Our strength lies in our people.

We are courageous and dedicated team players with solid experience from complex projects in both public and private enterprises. When businesses cooperate with us, they should feel that they have the best professionals at their back throughout the entire process.

Additional Information

For questions, please contact

• Jannie De Grijs
• Service Area Manager Cyber security
• E-mail
• Stine Bådstøe
• Recruitment partner
• E-mail

AFRY is committed to creating an inclusive and diverse working environment.

Error 500 (Server Error)!!1500.That’s an error.There was an error. Please try again later.That’s all we know.