Vaern: NIS2 & Compliance Consultant

Project overview

Help companies translate regulation into real security.

At Vaern, we are experiencing increasing demand from organizations that need to navigate a complex landscape of requirements, regulation, and security expectations. Therefore, we are looking for experienced consultants who can help clients translate compliance into concrete improvements in their security level.

As a NIS2 & Compliance Consultant, you will work at the intersection of governance, information security, risk management, and regulation. You will help clients understand the requirements, establish the necessary processes, and translate frameworks into practical solutions that work in everyday life.

The profile is not a classic "compliance auditor", but a broad advisor with an understanding of GDPR, NIS2, information security, governance, and business. The role must be able to achieve results for the client across multiple regulatory areas and not just work from checklists.

What you will be working with

As a consultant at Vaern, you will, among other things:

We imagine that you have:

• Advise clients on NIS2, GDPR, and information security NIS2, ISO 27001, or similar frameworks
• Conduct gap analyses and maturity assessments
• Establish governance models and compliance programs
• Develop policies, procedures, and controls
• Facilitate workshops with management and professional areas
• Perform risk assessments and impact analyses
• Support the implementation of ISO 27001-based management systems
• Help clients document and operationalize compliance
• Contribute to audits and regulatory requirements
• Create coherence between regulatory requirements, business, and security

Requirements

Important

• 5-8 years of experience with compliance, information security, or governance
• Experience with NIS2, GDPR, or equivalent regulation
• Experience with risk management and information security
• Experience with client-facing advisory or consulting work
• The ability to translate complex requirements into concrete solutions
• Experience with stakeholder management across the organization
• Experience with ISO 27001 and ISO 27002
• Knowledge of DORA, the CER directive, or other regulatory compliance
• Experience with governance and control environments
• Experience with audit preparation or audit execution
• Experience with critical infrastructure or the public sector
• Experience with maturity assessments and compliance roadmaps

Nice to have

Relevant certifications

We would like to see certifications such as:

Who are you?

You are an advisor who can create balance between compliance and business. You understand that most companies do not lack requirements, but help in translating requirements into action. Therefore, you focus on solutions, prioritization, and real value creation rather than documentation alone.

You thrive in dialogue with management, legal functions, IT, and the security organization. At the same time, you can work independently and drive complex customer assignments from analysis to implementation.

Vaern needs broad compliance profiles who can combine GDPR, NIS2, and information security with practical execution at the client rather than focusing solely on control and documentation.

Therefore, consultants choose Vaern

At Vaern, we work with security all the way from strategy to implementation. You will become part of a community of specialists where knowledge sharing, professionalism, and collaboration are highly valued. At the same time, you will have the freedom to shape your own role and influence the development of our security business.

We offer:

• Previous role as CISO or Head of Information Security
• Experience as DPO or Information Security Manager
• Experience with ISAE 3000 or ISAE 3402
• Legal or regulatory background
• Experience with Third-Party Risk Management
• Experience with GRC platforms
• ISO 27001 Lead Implementer and ISO 27001 Lead Auditor
• CISM
• CRISC
• CGRC (formerly CAP)
• Certified Data Protection Officer
• Certified Information Privacy Professional (CIPP/E)
• High professionalism and great freedom
• Complex tasks with some of Denmark's most interesting organizations
• Opportunity to influence the development of our compliance and governance practice
• Collaboration with experts in CISO Advisory, Security Architecture, and Operational Security
• Independent advice focused on the client's needs
• Opportunity to develop clients, solutions, and business

Project details

• Start: flexible
• Remote: remote
• Location: Anywhere, Denmark, DK
• Languages: Danish