Compliance Specialist – NIS2, AI Act, CRA, GDPR and new legislation

We are seeking a passionate employee with legal and regulatory understanding and an interest in cybersecurity, information security and new digital legislation! Can you translate complex legislation into concrete solutions and collaborate well across the organization? Then perhaps you are the one we are looking for!

About us

We are a dedicated team at THORNICO IT A/S that is passionate about delivering operations, support and advisory to companies within the THORNICO conglomerate.

As an integrated part of our Legal & Compliance team you will have a central role in work with legal and regulatory compliance as well as the implementation of new legislation within cybersecurity, information security and digitization.

We work among other things with GDPR, NIS2, ISO 27001, AI and Cyber Resilience Act and you will be involved in following the regulatory development and translating new requirements into concrete processes, policies and solutions in the organization.

We place great emphasis on collaboration and teamwork. You will therefore have broad contact surfaces and work closely with both IT specialists, management and colleagues across the THORNICO conglomerate.

Work location and flexibility

Your base will be our headquarters at Balticagade 18, 1., 8000 Aarhus C , but with the possibility to work from our offices in Odense and Copenhagen.

We offer a full-time position of 37 hours per week with the possibility of flexibility in scheduling.

Responsibilities

In your role your tasks will include, among others

• Legal and regulatory advisory within AI, NIS2, GDPR, Cyber Resilience Act as well as general cybersecurity, information security and digital regulation.
• Monitor and analyze new international and Danish legislation and assess what significance it has for THORNICO IT and the conglomerate's companies.
• Translate regulatory requirements into concrete processes, policies, controls and workflows.
• Advise on and quality assure IT security policies, data processing agreements, contracts and other legal documents.
• Prepare risk assessments, impact analyses and other regulatory assessments.
• Contribute to development and execution of training and awareness activities.
• Contribute to the implementation and further development of ISO 27001 and other relevant frameworks.
• General legal and regulatory advice within a wide range of areas.

From legislation to practice

An important part of the role will be the ability to move from legal text to concrete action .

This means that you should for example be able to help answer questions such as

What does the new regulation mean for us?

Which requirements are we covered by?

What do we need to change in our processes and systems?

Who is responsible – and how do we document that the requirements are implemented?

You do not need to be an expert in everything from day one. The most important is that you have a strong legal and analytical approach, an interest in technology and cybersecurity, and the desire and ability to get things done in practice.

Qualifications

We are looking for a candidate with an academic background in law, business law, compliance, IT or similar.

We imagine that you can tick off some of the qualifications below

• Several years of relevant experience, preferably from a company with an international perspective.
• A solid professional foundation and thrive in a hands-on role in a varied and exciting everyday life.
• Experience with or interest in AI, NIS2, CRA, GDPR, information security and cybersecurity.
• Experience with implementing legislation, ISO standards or other compliance frameworks.
• Ability to analyze complex legislation and translate it into concrete requirements and solutions.
• Interest in developments within technology, cybersecurity and digital regulation.
• Good communication and collaboration skills in both Danish and English.
• An understanding of IT and technical issues – you do not need to be a technician, but you should be eager to understand the technology.

We offer

• Professional challenges and the opportunity to develop within a rapidly evolving area.
• The opportunity to work at the crossroads of law, technology, cybersecurity and business.
• A central role in the implementation of new regulation in an international organization.
• Flexible working conditions and a balance between work and private life.
• Attractive employee benefits, including a canteen scheme and employee association.

Application

If you are passionate about understanding new legislation, translating it into practice and helping to create secure and well-functioning solutions, we would love to hear from you.

We process applications on an ongoing basis, so if you believe this job is right for you, please send your application today via the link below.

For questions contact Head of Legal and Compliance, Freja Lyno-Hansen (mail: frlh@thornicoit,com, tlf: 29821268)

We look forward to welcoming you to our team!