Required skills
- Cybersecurity
- Information Security
- Risk Management
- GRC
- Security Strategy
- Stakeholder Management
- Consulting
- Leadership Advisory
- Governance
Languages: Danish
Job description
Vaern is seeking an experienced Senior CISO Advisor to act as a trusted security advisor for companies and public organizations, focusing on strategy, governance, risk management, and transformation.
Project overview
Be the trusted security advisor that companies call when decisions are critical.
At Vaern, we help companies and public organizations strengthen their security through independent advice. We are looking for an experienced CISO Advisor who can translate cybersecurity, risk management, and governance into concrete results for the client.
As a consultant, you will be the client's strategic sparring partner and advisor to management, CISOs, CIOs, and boards. You will help organizations navigate an increasingly complex threat and compliance landscape, ensuring that security supports business goals rather than hindering them.
The role combines strategy, governance, risk management, and transformation, but always with a focus on implementable solutions and measurable results. Client-facing security programs, risk management, and dialogue with management and boards are central elements of your experience.
What you will work with
As a Senior CISO Advisor, you will be involved in complex and business-critical client engagements, where you will, among other things:
We imagine that you have
- Develop and further develop security strategies
- Advise executive management, boards, and security leadership
- Conduct security maturity and risk assessments
- Drive governance and compliance initiatives
- Lead major security and transformation programs
- Develop roadmaps and investment plans
- Facilitate workshops for management and key stakeholders
- Help clients translate NIS2, ISO 27001, and regulatory requirements into practical solutions
- Establish or further develop security organizations and operating models
- Create coherence between business, technology, and security
Requirements
Important
Experience with:
- Minimum 8-10 years of experience in cybersecurity, information security, or risk management
- Experience advising management or decision-makers
- Experience with governance, GRC, and risk management
- Experience with security strategy and organizational security development
- The ability to drive client engagements independently
- Experience with senior-level stakeholder management
- Strong communication and presentation skills
- NIS2, ISO 27001, or similar frameworks
- The consulting industry or an advisory role
- Major transformation programs
- Critical infrastructure or public organizations
- Security maturity assessments and roadmaps
Nice to have
Relevant certifications
It is not essential, but we would like to see certifications such as:
Who are you?
You are first and foremost an advisor. You can move effortlessly between the boardroom and the technical organization. You challenge clients constructively, build trust through expertise, and have enough experience to distinguish between theory and practice.
You don't need a large team around you to succeed. You thrive with responsibility, independence, and client relationships, and you are motivated by creating measurable results for the client rather than just delivering presentations. This matches the qualities Vaern highlights as crucial: independence, credibility, the ability to work virtually, and the desire to help build a practice.
Why consultants choose Vaern
At Vaern, we work with security all the way from strategy to implementation. You will become part of a community of specialists where knowledge sharing, expertise, and collaboration are highly valued. At the same time, you will have the freedom to shape your own role and influence the development of our security business.
We offer:
- Previous role as CISO or Head of Information Security
- Experience with board reporting
- Experience with cloud governance and Zero Trust
- International experience
- Experience with M&A, due diligence, or cyber risk assessments
- CISSP
- CISM
- CRISC
- CGEIT
- ISO 27001 Lead Implementer and ISO 27001 Lead Auditor
- Complex and business-critical client assignments
- Independent advice without a focus on product sales
- Great freedom and flexibility in daily life
- Opportunity to shape and develop our security business
- A strong professional environment across cybersecurity areas
- Close collaboration with some of the market's most skilled security consultants
Project details
- Start: flexible
- Remote: remote
- Location: Anywhere, Denmark, DK
- Languages: Danish
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on jobs.darize.com