Senior GRC Consultant (Cyber & Information Security)
Deliver governance, risk and compliance consulting in cyber and information security (NIS 2, ISO 27001, CIS Controls) for Danish companies and public institutions, while building software automations and agentic LLM tools. Based in Copenhagen with hybrid remote; part of a fast-growing consulting firm's GRC services team.
- Compensation
- Not disclosed
- Location
- Danmark
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- At least 3 years delivering GRC consulting
- Hands-on experience building automation and/or agentic tools
- Automated GRC tasks with software and LLMs, refining output to beat human work in some aspects
- Driven delivery of software products in collaboration with developers
- Ability to get up to speed on new regulatory requirements under tight deadlines
- Fluent in English
- Experience helping companies implement and comply with NIS 2, ISO 27001, and CIS Controls
- Ability to drive projects independently and manage senior stakeholders
Nice to have
- Experience across several clients at once
- Danish language skills
- Relevant master's degree or equivalent hands-on experience
- Startup mentality and ability to structure complex assignments
Full description
We're looking for an experienced cyber and information security consultant in the GRC domain who has hands-on experience building automation and/or agentic tools into their work.
**What You'll Do
**We're scaling our GRC services team, a team dedicated to making governance, risk, and compliance of cyber and information security more efficient, effective, and valuable to organisations. We do this by automating processes through software and agentic tools, and by defining tasks, inputs, and outputs more clearly than is currently the norm.
As our client list grows, we need someone who can deliver GRC consulting from day one and open up new paths to delivery by developing and implementing our own tools and automations.
This role is open to being shaped by your own passions and talents, whether that's software development, sales and marketing, or deep industry knowledge.
**In This Role, You'll Definitely Be
- Helping companies implement and comply with laws, standards, and frameworks like NIS 2, ISO 27001, and the CIS Controls
- Driving projects independently and managing senior stakeholders
- Influencing decisions on cyber and information security at some of Denmark's leading companies and public institutions
**Depending on your experience and interests, you may also be:
- Developing your own client networks
- Programming and deploying your own agentic software tools
- Performing technical cybersecurity tasks in client environments
- Building new services from the ground up, targeting industries or problems you understand uniquely well
**What You'll Bring
**You may be a great fit for this role if you have delivered GRC consulting for at least three years, ideally across several clients at once. On top of that, you should have:
- Automated GRC tasks with software and LLMs, refining the output until it beats human work in at least some aspects
- Driven the delivery of software products in collaboration with developers
- Gotten up to speed on new regulatory requirements under tight deadlines
- Fought the least valuable and most dull parts of GRC work while defending the value of good GRC against sceptics and cynics
The ideal candidate must be fluent in English – Danish is a plus, but not required – and we value a relevant master's degree or equivalent hands-on experience.