Security & Risk Management Consultant

The best part about working for WithSecure is our people! We are a community of dedicated and passionate professionals that take workplace happiness seriously. If you’re looking for something that’s more than just a job – we’d love to hear from you.

Then you should come work with us at WithSecure!

We are looking for a Security and Risk Management Consultant to join our Consulting Team in the exciting adventure of improving the information security posture and cyber resilience of our clients.

We help our clients by prioritizing where to focus their budgets to optimize their return on cyber security investments in their quest for cyber resilience.

We pride ourselves on fostering an environment rich in fun, collaboration, and continuous learning. Here, you will lead your own development and play a key role in shaping a workplace that you will proudly call home.

• performing cyber security gap assessments for clients across a variety of domains, including finance, operational technology (OT), critical infrastructure, and cloud service providers.
• performing PCI DSS assessments and building PCI DSS programs for clients

• establishing information security governance frameworks
• advising on security objectives and risk appetite, security strategy and budget developing and maintaining good, long-term relationships with the client and their stakeholders, including business, IT, product management and software development organizations
• being an upstanding colleague! Supporting other team members (maybe even by mentoring) and enabling us to succeed collectively.

• Ideally you have 3-5 years of professional experience within information security with a suitable educational background.
• your current role is probably an information security consultant, CISO, security manager, security architect, information security auditor, or similar
• you have a track record of successful security and/or risk management experience
• you are proficient in English
• you are experienced in some of the following fields:

• legal requirements for information security, such as NIS, GDPR, and national legislation

• cyber maturity assessment and IT audit
• governance, risk and compliance
• privacy assessments

• Recognized certifications within risk, security and privacy management, especially PCI QSA, but also CISSP, CISM, ISO27001 Lead Implementor, CISA, or CRISC.
• Previous consulting experience and strong network in industry.
• Experience with agile process models and different flavours of software development lifecycles are a plus
• technical architecture skills (including cloud architecture) are a plus
• software development/SDLC competence and experience from assisting organizations in their journey to shift left as well as practical security engineering experience.
• Understanding and speaking Danish

• 1 to 1 coaching and mentorship sessions led by seasoned and well-respected industry-leading professionals
• The opportunity to be involved in service development to shape the services we deliver to our clients to be aligned with future market needs
• Access to our state-of-the-art bespoke training platform
• Classroom-based learning sessions and the opportunity to attend external training courses and security conferences
• Opportunities to push the industry forward through research using our blogs, talks, white papers and by participating at industry events

If you like helping companies to improve their information security posture and cyber resilience, and challenge conventional wisdom, WithSecure Consulting has got your back.