Compliance Manager for Critical Infrastructure

Compliance Manager til samfundskritisk infrastruktur

Would you like to help improve information security in Denmark's railway network? Do you have experience implementing and maintaining an ISMS and with governance and compliance within regulatory frameworks? And are you motivated by translating security requirements into practice in a complex, society-critical context? Then this could be the right opportunity for you.

At Banedanmark, information security is a focus area for top management, and we have established a dedicated IT/OT security team under the section, OT Operations. The team, Cybersecurity & Compliance, plays a central role in ensuring that the railway network's signaling systems and underlying technological infrastructure are resilient and secure, in step with increasing digitization and regulation.

We are now seeking a competent and engaged compliance manager who can help drive and mature security work across systems, vendors and projects at Banedanmark.

Your role

As a compliance manager in the Cybersecurity & Compliance team, you will be a key person in ensuring that Banedanmark's security work is well-communicated, well-documented, risk-based and in accordance with Banedanmark's ISMS. This reflects the requirements placed on the society-critical railway network, including NIS2 legislation.

You will be involved in tasks such as

• Operationalization and implementation of Banedanmark's ISMS, including policies, processes and security measures
• Conducting and documenting risk assessments and gap analyses
• Integration of a new GRC module in an OT operations section
• Follow-up on suppliers' documentation, audit statements and security levels
• Prepare and participate in internal and external audits

You will collaborate broadly across the organization – with project managers, system architects, specialists and external partners – and serve as an anchor in security work. You will play a central role in translating security requirements into practice and supporting colleagues who are responsible for the operation of systems and compliance with legal requirements.

Your profile

You have a strong interest in IT security and compliance in a society-critical area and understand the importance of creating a robust and secure IT/OT infrastructure through effective communication, governance, structure and risk-based decisions. You work methodically, have an eye for detail and thrive on creating overview in complex contexts.

We imagine that you

• Have experience with ISMS, compliance or risk management – preferably in a regulated sector
• Have knowledge of ISO 27001 and other relevant frameworks (e.g., NIS2, CER, CIS v8)
• Have the ability to analyze and document risks and security measures in an operations and project context
• Thrive in the intersection of strategy, law, technology and business
• Have a relevant advanced education and/or solid experience with IT security, risk management or compliance and an understanding of OT operations and the technical terminology

It is advantageous if you have experience from a regulated sector or from working with critical infrastructure. A technical background is not a requirement, as governance and analytical abilities are weighted highest.

The practical

You will become part of a new and motivated team with an important mandate and an efficient collaboration culture. We place emphasis on a solution-oriented, constructive and curious approach, where good humor is at the forefront. There is a focus on professional development, competence-building and knowledge sharing. And you will have the opportunity to develop as security evolves and expands.

You will achieve a balanced work-life, without compromising your professional goals.

It is a prerequisite for employment that you can obtain security clearance and maintain it throughout your employment.

We offer

• A central role in an organization with societal-critical responsibility
• Opportunity for professional deepening and competence development
• Flexible working hours and possibility for home office
• Fitness facilities and cafeteria scheme

Your workplace will be in Copenhagen, on Carsten Niebuhrs Gade close to Fisketorvet and Dybbølsbro Station. It is close to the metro and there is the possibility to park a car or bike in dry weather.

Salary

If you are an academic employee, you are hired under the applicable collective agreement between the Ministry of Finance and a number of academic organizations for academics in the state.

You are placed on the basis of academic seniority and experience as a legal officer at the base level, jf. applicable collective agreement, which you can find here and the Salary Overview from the Agency for Governmental Employees and Skills, which you can find here .

Depending on your qualifications and competencies there is a possibility for negotiation of a supplement. There will be an employer-funded pension scheme at 18.07 %.

Otherwise you are hired under the applicable Unified Agreement between the Ministry of Finance and Public Employees’ Organizations – The Civil Service Area (OAO-S Unified Agreement) and the IT staff agreement (KODEX).

The position is in principle placed in salary grade 4 according to the applicable agreement, which you can find here and the Salary Overview from the Agency for Governmental Employees and Skills, which you can find here .

Depending on your qualifications and competencies there is a possibility for negotiation of a supplement. There will be an employer-funded pension scheme of 16 % on top of the total salary.

Application and contact

Do you want to contribute to Denmark's infrastructure? Then send us your application and CV as soon as possible. To apply for the position, click the link “Søg stillingen” and follow the instructions.

If you want to know more, contact Team Lead Sarah Fugl at [email protected]

If you have questions about salary and employment terms, you can contact our HR staff on [email protected]

Different perspectives make us stronger. Therefore Banedanmark values diversity and encourages all interested candidates, regardless of personal background, to apply.

If you progress from the initial interviews, references will be requested from previous employers. You will be informed before a reference is requested.