Security Advisor GRC

Role Summary

Do you want to be the adviser who makes safety possible in practice?

Technology alone does not stop cyber threats. It does good processes, wise risk assessments and people who understand both worlds.

Sopra Steria is looking for security advisors who can help Norwegian businesses manage cyber risk, build management systems and ensure compliance. You don't need to be a tech geek, but you do need to understand what technology means to the business.

What awaits you?

As a security advisor within GRC, you work with governance, risk management and compliance across industries. You help customers with everything from establishing safety management systems to carrying out risk analyzes and preparing them for new regulatory requirements. Our customers range from banking and finance to the public sector and critical infrastructure.

What will the work tasks entail?

Among other things, you will work to carry out risk analyzes and vulnerability assessments at business level, establish and further develop information security management systems (ISMS), and advise on compliance with relevant frameworks such as ISO 27001, NSM's basic principles and industry regulation. The role also involves drawing up security policies, guidelines and emergency plans, as well as facilitating workshops and training to strengthen the security culture in the organisation.

Are you ready to turn security into strategy?

Then we hope you will have an informal chat with us!

Application deadline: As soon as possible. We select and invite candidates for interview on an ongoing basis.

Sopra Steria has customers and projects that may require security clearance at various levels.

Do you have questions or are you a little curious?

Do not hesitate to contact Magnus Arnesen (452 48 494) or Anand Prashar (976 35 002).

Requirements

You are structured, analytical and good at communicating, and you enjoy making security understandable and feasible for the entire organisation. Perhaps you come from auditing, risk management or compliance in the financial sector, or you have a background in public administration and experience with national security. We think you have experience with, or an interest in, risk management, compliance or security management, and that you are familiar with frameworks such as ISO 27001, NIST CSF, NSM's basic principles or CIS Controls. You are also good at writing - policies, reports and presentations are a natural part of everyday work - and you like working with people and processes as much as with technology. If you also have certifications such as CISM, CRISC or ISO 27001 Lead Auditor, that is an advantage, but the most important thing is that you are curious and motivated to develop yourself further.

Benefits

• Why choose Sopra Steria?
• GRC is not dry paperwork with us. It is strategic advice that affects how businesses protect themselves. You will be part of an interdisciplinary cyber security environment where technicians and advisors work closely together.
• With us, you will be part of a strong professional environment where expertise sharing, development and curiosity are at the centre. We make it possible for you to develop professionally through certifications, courses and conferences, and we actively invest in you becoming the best in your field.

We offer competitive conditions and flexibility in everyday working life, with six weeks holiday, full pay during parental leave and sickness, good pension and insurance schemes and private health insurance. You also get access to company cabins, a contribution to the fitness center and a social environment where there is always something going on. With us, there must be room for both ambitions and balance in everyday life.

We are Norway's leading consultancy in digitalisation, innovation and sustainability. At Sopra Steria, we assist our customers in the private and public sector to become the businesses of the future. For a number of years, we have been ranked as one of Norway's best workplaces. You will find us in Oslo, Stavanger, Trondheim, Bergen, Drammen, Hamar, Fredrikstad, Kristiansand and Tromsø.

About the Company

Are you curious and motivated by human and technological transformations? Do you want to learn continuously from our teams, to be confronted with new clients/contexts and varied issues?

Then you are in the right place.

At Sopra Steria Next, you join a consulting firm that combines business and technological expertise, and which is among the best in management and digital transformation.

We help our clients succeed in their transformation projects by creating value beyond the simple economic aspect, by making sense of data, innovating through artificial intelligence and engaging all stakeholders at every stage.

What drives us: having a concrete impact on the experience and commitment of employees within large companies and public organizations in various sectors: aeronautics, ministries, transport, energy, financial services, etc.

Our approach: explore subjects in depth, constantly improve our skills, innovate and stay attentive to the best practices in our specialty in order to better serve the challenges of our clients.

Our strengths: a collective that helps each other to find the best solutions for our customers, a united team and a spirit of trust.