Student assistant for Information Security & Preparedness

Do you have a business law background and a desire to work at the crossroads of law, security and critical infrastructure? Then this is a student job where you get your hands dirty with real tasks from day one.

Become part of a strong team in a dynamic environment

A department with high wellbeing warmly welcomes you

Information Security & Preparedness is responsible for ensuring that Kredsløb can deliver supply safely and stably — even when something goes wrong. We work with governance, risk management, compliance, information security, supplier management and emergency preparedness across the entire organization, and we advise management and the board.

As a utility company we are subject to complex regulation — NIS2, the CER Directive, emergency preparedness requirements in the utility sector, GDPR, AI Act, etc. Our task is to translate requirements into something the business can actually use.

The function is small and works closely together, and you will therefore get a broad insight and real responsibility rather than peripheral tasks.

Your tasks

You will become part of the daily work and support the function's programs and operations. Specifically you will among other things:

• Develop and maintain policies, procedures, guidelines and action cards — including version control and document hierarchy
• Support gap analyses and control documentation with respect to NIS2, CER and ISO 27001
• Assist with risk assessments and maintenance of risk registers
• Review security and data protection requirements in supplier agreements and support supplier assessments
• Collect data for management and board reporting (KPIs and status of programs)
• Follow regulatory developments and prepare brief notes for internal use
• Produce awareness material and support internal training

The tasks are adapted to your background and interests — if you are strongest in the legal area, you will get more contract and regulation work; if you are passionate about security and technology, we will steer you that way.

The position is approximately 8 hours per week, and the working hours can be arranged flexibly by agreement.

We imagine that you

• Are studying HA(jur.) and are in progress with your bachelor (typically 4th–6th semester) or your master's — e.g., cand.merc.(jur.), erhvervsjura or jura. Other relevant degrees with a legal or security-focused emphasis may also be considered.
• Have an interest in information security, data protection, governance or preparedness. Experience is not a requirement — curiosity and willingness to learn the subject are.
• Are structured and detail-oriented and can create an overview in large amounts of material.
• Can express yourself clearly and concisely in writing — both in Danish and English — and can translate complex requirements into understandable language.
• Can work independently, follow tasks through to completion and speak up when something is unclear.
• Are familiar with the Office suite and SharePoint.

We do not expect you to know NIS2 or ISO 27001 beforehand. You will learn it here.

Do you have a green mindset?

Then send your application to us as soon as possible and no later than October 25, 2026. We review applications on a rolling basis.

You are welcome to contact the department head Oliver Takacs Sørensen at 2327 7221 if you want to know more about the position.

Expected start date is as soon as possible.