Internal auditor for information security at Central Denmark Region - fixed-term position

Do you want to help strengthen information security in one of Denmark's largest public organizations?

Region Midtjylland is looking for an internal auditor who will contribute to evaluating and further developing the region's information security management system. You will play a central role in ensuring that information security requirements are followed, and that the region's policies, procedures and security measures function as intended.

As an internal auditor, you will plan and conduct internal audits across the organization and help create an overview of strengths, risks and areas for improvement, which support the management's decision-making basis. You will also become an important sparring partner that supports a culture where audit is perceived as a tool for learning, development and continuous improvement of information security.

Your primary tasks

You will be responsible for establishing and further developing the region's process for internal audit and for preparing and maintaining a risk-based audit program.

Your tasks will include, among others, to

• Develop the region's audit program
• Plan and conduct internal audits in accordance with the audit program and applicable information security requirements
• Define audit objectives, audit criteria and audit scope
• Collect and assess documentation, interview information, observations and other audit evidence
• Assess compliance with ISO 27001 as well as the region's policies, guidelines and procedures
• Identify deviations, risks, improvement opportunities and examples of good practice
• Prepare reports and present audit results to management and relevant stakeholders
• Contribute to follow-up on identified areas for improvement
• Ensure that existing audits, supervision, IT audits and other control activities are actively included, so that already available knowledge is utilized as effectively as possible

About you

We are looking for an internal auditor who is trustworthy in dialogue with others and able to establish good and constructive collaboration across the organization. You meet employees and managers with an appreciative and respectful approach and show patience in the audit process. At the same time you have the courage to identify and point out faults, shortcomings and areas for improvement in a factual and constructive manner. You see internal audit as a tool for learning and quality development rather than control.

We also imagine that you

• Are analytically strong and can translate complex issues into clear conclusions
• Have good written and oral communication skills
• Work in a structured and independent manner
• Can foster collaboration and trust across different domains
• Have knowledge of information security and ISO27001

Who are we?

You will be employed in the information security team in Digital Administration, which is part of Region Midtjylland's overall information security function. The function is a collaboration between Security and Compliance, which is part of Digitalization and IT, and Legal Office and Digital Administration, which is part of the Regional Secretariat.

Digital Administration works to promote digitalization and ensure a systematic, common framework for information security work across the region. We are part of the Regional Secretariat, which also handles secretarial support for the regional council and management as well as a number of cross-cutting tasks.

Workplace: Regionshuset Viborg, Skottenborg 26, 8800 Viborg

Salary and employment conditions

The position is fixed-term until December 31, 2028, with possible extension.

The position is, in principle, a full-time role.

Application deadline: December 5, 2026.

Expected interviews: December 15, 2026.

Start date: February 1, 2027 or by agreement.

Salary and employment terms in accordance with the applicable collective agreement.

Additional information about the position

If you have questions about the position, you can contact Rikke Stein, Head of Office in Digital Administration, at phone number 21359030 or by email [email protected] .

The position is, by default, a full-time role.

As Region Midtjylland continuously undertakes cost-saving measures and reorganizations, employees in reassignments who apply for the position will have priority.

Region Midtjylland is, in accordance with the EU salary transparency directive, which came into force on June 7, 2026, obliged to inform you about starting salary or a salary range before offering employment.

Here you can find Region Midtjylland's salary catalog for most professions and positions found in Region Midtjylland: Transparency before hire - Medarbejder.rm.dk