Information Security Specialist

Do you want to build an Information Security Management System (ISMS) that people actually use? At COWI, you will work at the intersection of cybersecurity, risk management, business operations, and digital transformation. You will play a key role in helping us strengthen trust, resilience, and security across our global business.

Create the solutions that will enable a better tomorrow

At COWI, we create sustainable solutions that improve the quality of life for people today and generations to come. Our experts work across infrastructure, energy, water, environment, architecture, and buildings, delivering projects that shape societies and support critical services around the world.

As a trusted advisor to clients and partners, information security is essential to protecting information, managing risk, and maintaining trust. We are continuously strengthening our security capabilities to support our business, our people, and our clients.

We are further maturing our Information Security Management System (ISMS) and embedding security into the way we work across the organization. Working closely with colleagues across Information Security, IT, Legal, Privacy, and the wider business, you will help develop practical, business-oriented governance structures, controls, and processes that reduce risk, support secure operations, and enable trusted project delivery.

Reporting to the CISO, you will play an important role in both the ongoing development and day-to-day operation of our ISMS.

Your primary responsibilities will include:

• Developing and simplifying ISMS policies, processes, controls, and documentation to improve security outcomes and increase business adoption.
• Driving initiatives related to ISO 27001, and applicable regulations and costumer requirements.
• Supporting internal and external audits and following identified improvement actions through to completion.
• Advising project teams, business stakeholders, system owners, and IT colleagues on information security requirements and practical ways of managing risk.
• Supporting management reporting and governance activities by measuring and communicating the effectiveness of our security framework.
• Contributing to awareness and engagement activities that strengthen COWI's security culture and support secure ways of working.

We work collaboratively and support each other across disciplines, but we also expect you to take ownership of your workstreams and drive initiatives through to completion.

Your skills. Our team. Together, we design the future

The first step to success in this role is that you are eager to collaborate with the people around you, whether they are colleagues, partners or customers. Developing ties with others is something you do by acting respectfully and delivering on your promises. And you never get set in your ways, but keep exploring new insights and ways to improve.

In addition, we value that you:

• Have experience within information security, governance, risk and compliance (GRC), audit, risk management, consulting, or a related field.
• Bring hands-on experience with information security governance and the implementation of security frameworks, either as an internal specialist or a trusted advisor. 
• Understand how to balance security requirements with business needs and have experience supporting security initiatives across different organizations and stakeholders.
• Can independently analyze challenges, identify practical solutions, and work with stakeholders to implement them.
• Work in a structured and methodical manner and see initiatives through to completion.
• Can translate standards and security requirements into pragmatic and business-oriented solutions.
• Communicate clearly and effectively in English.
• Have sufficient technical understanding to discuss topics such as identity and access management, cloud services, supplier security, vulnerability management, and business continuity with both technical and non-technical stakeholders.
• Enjoy collaborating across organizational boundaries and building strong relationships with colleagues and business stakeholders.
• Have solid experience with ISO 27001, NIS2, audits, risk management, or large international organizations.

A place to work and so much more

At COWI we work together with our customers to shape a sustainable and liveable world. We do it by applying our knowledge and curiosity – and sometimes even our courage – to create the solutions the world needs today to enable a better tomorrow. We support our customers’ transition towards increased sustainability. We strive to lead by example by embedding environmental management, social responsibility and good governance into our business practices and the options we provide to our customers.

We value differences and development and cultivate an environment of belonging and having fun. Because that is what brings out the best in you, at work and at home. 

With offices primarily located in the Nordic region, the UK, North America and India, we are currently more than 7,500 people who bring their expertise in engineering, architecture, energy and environment into play.

What we also offer:

• Private health insurance after the probation period
• Accident insurance from the first day of employment
• 1 extra day off after your birthday
• Hybrid working conditions
• Other benefits, such as: personalized development plans and online trainings, new and modern office space, various COWI partners discounts and offers, social initiatives, and corporate events

Salary for this position starts from 5000-6600EUR before taxes. We believe in your professional capability therefore the final offer will be based on your competencies and experience.

Got more questions?

If you have unanswered questions about the role or what we have to offer, please reach out the Hiring Manager Charlotte Miolane, Group Chief Information Security Officer at camo@cowi.com

Get to know us even better at our website www.cowi.com where you can learn more about our projects, our strategy, what we want to achieve, and what life is like at COWI

Diversity is fundamental to COWI, inclusion is key

COWI provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, colour, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, COWI complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence compensation and training.