GRC Security Consultant

About the role

Sopra Steria is looking for GRC security consultants to help Norwegian companies manage cyber risk, build governance systems and ensure compliance. You do not need to be a technical expert, but you must understand what technology means for the business. The work spans banking and finance, public sector and critical infrastructure.

Key responsibilities

• Carry out enterprise-level risk analyses and vulnerability assessments
• Establish and develop information security management systems (ISMS)
• Advise on compliance with ISO 27001, NSM basic principles and industry regulations
• Write security policies, guidelines and incident response plans
• Facilitate workshops and training to strengthen security culture

Required profile

• Structured, analytical and good communicator, able to make security understandable across the organisation
• Background in audit, risk management or compliance in finance, or public administration and national security
• Experience with, or interest in, risk management, compliance or security leadership
• Good writing skills for policies, reports and presentations
• Certs such as CISM, CRISC or ISO 27001 Lead Auditor are an advantage

Required skills

• Familiarity with ISO 27001, NIST CSF, NSM basic principles or CIS Controls
• Knowledge of ISMS and risk assessment frameworks

What we offer

• Competitive conditions and six weeks of holiday
• Full pay during parental leave and sick leave
• Pension and insurance schemes and private health insurance
• Access to company gym, sports centre contributions and social events

Applications are accepted until the position is filled; candidates are invited to interview continuously. Contact the recruiter by phone.