The University of Copenhagen is looking for specialists in information security

Are you going to be one of the University of Copenhagen's new security and compliance specialists? We are looking for three specialists for KU's joint information security team, who will help strengthen, develop and contribute operationally to the university's management processes for information security and compliance. You will be part of KU's joint unit for Research Compliance, which is located in the University Administration under the Deputy Director's area of ​​Research and Information Security, and which, in addition to KU's CISO function, which handles security management and advice, also includes the DPO function and the central advisory team for research data management. The area is important for KU's research and education efforts, and you must, in interaction with KU's management, administrative areas, faculties, institutes and centers, assist in ensuring an appropriately high and verified level of security and compliance at the university. On a daily basis, you will be part of an inclusive and inspiring community with a number of well-qualified and experienced specialists in the unit, who coordinate the security and compliance work across the university with a particular focus on KU's research processes and research infrastructure. Tasks The three specialists that the unit is looking for must, together with the other colleagues, contribute to; that there are sufficient and effective processes and tools for managing and managing security and compliance, that there is a timely assessment and handling of security risks and security incidents, that security and compliance are handled consistently in KU's business processes, systems, infrastructure, projects, collaborations and supplier relationships, that compliance with both external requirements and internal policies and standards is monitored, and that deviations from these are handled. Tasks which are solved by and distributed between the three specialists include: General security and compliance advice for the organisation. Development and maintenance of the unit's process and method apparatus. Coordination and facilitation of or expert assistance for risk management and audits of processes, systems, infrastructure and security architecture. Follow-up on risk management and corrective actions. Coordination, escalation and handling of security incidents and data breaches. Review and quality assurance of system-oriented architecture and security assessments. Preparation of consolidated reporting to the University management as well as to the Danish Agency for Education and Research and other authorities and stakeholders. The three specialist roles and the distribution of responsibilities between them will be adapted taking into account their competence profiles and experience. In the starting point, the roles are divided into three main areas: risk and security incident management, audit and deviation management as well as security architecture and security measures. We expect You typically have a background in information security, process and quality management or enterprise/IT architecture and must be able to recognize yourself in most of the following qualifications and characteristics: Ability to work analytically, methodically and rigorously built up through relevant education or work experience. Solid knowledge of and preferably certifications in the area of ​​information security, audit, or architecture (e.g. CISSP, CRISC, CISA, ISO 27001 LI/LA, TOGAF, BPMN etc.) Basic insight into good practice for the implementation and operation of IT infrastructure and systems (preferably an ITIL or a CGEIT certification). Good knowledge of the ISO 27001 standard and/or equivalent safety standards. Preferably experience with preparation of process and data models and requirements specifications or with development and quality assurance of enterprise, IT or security architecture. Experience of working in a large, complex and politically controlled organization with many different stakeholders and tasks. Ability to work independently/self-directed and take initiative. Good communication skills in both writing and speaking in both Danish and English. The job as a specialist in the unit requires up-to-date knowledge of developments within the security and compliance area, combined with a broad outlook and understanding of the university's role in society. Ongoing and committed competence development as well as participation in relevant forums and networks is therefore a matter of course. Salary and employment conditions You are employed according to the applicable collective agreement. If you have an academic background, you will be employed as a specialist consultant or clerk in respect of over
agreement between the Ministry of Finance and AC. If you have a different educational background, you will be employed in accordance with the Joint Agreement between the Ministry of Taxation and Public Employees' Organizations - The State Sector (OAO-S) and organizational agreement for office clerks, laboratory technicians and IT employees (HK/STAT). The employment is as an office clerk in salary group 4. There is an opportunity to negotiate an individual supplement based on qualifications. We want to reflect the surrounding society and encourage everyone, regardless of personal background, to apply for the position. Your application Send your application with CV and relevant documents in attachments no later than 21 April 2025 via [link removed] (CLICK on APPLY FOR THE POSITION at the bottom of the post). The expected accession is 1 June 2025 or as soon as possible. Further questions Questions about the position can be directed to: Thomas Schlichting, Security Advisor/CISO [phone removed], [email protected] Simon Heinsen, Chief Consultant [phone removed], [email protected]