Information security consultant
Information Security Consultant at UNITAS in Aarhus North (Lystrup)
Are you passionate about information security and do you miss being part of a GRC/CISO/GDPR and IT Security team that infects each other with good energy, knowledge and ideas on a daily basis?
Then here is the opportunity to become part of a team that understands the overall strength and ability to deliver services and products of very high quality.
Om UNITAS
UNITAS is a well-run company specializing in information security, data protection, law and compliance.
The company was established in 2019 with a vision to build a bridge between IT and law. The vision was then, as now, that UNITAS must be the customers' preferred external information security and compliance department.
I UNITAS We are continuously working on organizational and employee development so that the framework and foundation are in place – in relation to the further development of both UNITAS and the employees.
In everyday life, the different teams work closely together on tasks, solutions and business development, and in practice they act according to our values, which are collaboration, quality and joy.
UNITAS currently consists of 16 employees and we are now expanding the information security team and are therefore looking for 2 new colleagues.
The working environment at UNITAS
In everyday life at the office, we are very social, help each other, engage in a number of joint activities and generally have a lot of fun, but we never lose sight of the academic or professional work.
IT equipment and digital tools are of high quality. The same is true of the physical environment, which contributes to job satisfaction, which is crucial to our success. You will experience great freedom under responsibility. We create an open dialogue through informal conversations where we share knowledge and support each other. We believe that good results are best achieved through collaboration and a focus on quality in delivery.
You will have great freedom to work at home, with customers or at the workplace in Lystrup. However, as a general rule, you must attend the office on Monday and Friday.
Your primary tasks
- Work with security standards such as ISO 27XXX, CIS, NIST.
- Advice on relevant compliance areas, including NIS2, Cyber Resilience Act (CRA), DORA, Part-IS and similar.
- Advise customers on solutions to specific challenges, including training and communication to management to ensure anchoring in the organization
- Manage implementation projects at customers, where you will have your own customer portfolio
- Conduct threat and risk assessments.
- Work with supplier management.
- Obtain, assess and prepare relevant documentation in connection with audit statements, including ISAE3000, ISAE3402, SOC2, etc.
As an Information Security Consultant at UNITAS will you play a central role in ensuring that our customers comply with applicable regulations such as NIS 2, DORA, GDPR etc. You will be part of a team where you will have the opportunity for professional sparring with like-minded people. We offer a position with great influence where you can help build something meaningful - both for our customers and for UNITAS.
Who are you?
- Minimum 2-3 years of practical experience with information security. If you have experience from the consulting industry, it is a great advantage.
- One or more relevant educations or certifications, e.g. ISO27001 Lead Implementer / Lead auditor, CISA or similar. If you have the right experience and personality, but lack certifications to support this, we of course support you obtaining relevant certifications.
- Understanding of operating at the intersection of business, compliance, technology and risk.
- Excellent communication skills in Danish and English (we live by being able to write).
- Flexibility in connection with consulting tasks primarily in Jutland and Funen - even though much can be solved remotely
- You are able to uncover and understand the customer's needs and deliver based on that
Personal skills
You meet others with a positive, flexible and solutions-oriented approach. You have an overview and can run several tasks simultaneously. You communicate clearly and down to earth, so that the messages are easy to understand - even when the topic is complex.
You work in a structured manner and naturally take responsibility for your tasks. When a challenge arises, you see opportunities rather than limitations, and you like to think creatively to find the best solution - even when it means breaking new ground to create value for our customers.
We offer
- Opportunity for professional sparring and development at a high level
- Knowledge sharing meetings with your colleagues, as well as the rest of UNITAS
- Great influence on own tasks and areas of responsibility
- Short path from idea to action and room for good ideas
- Minimal administration and limited time tyranny
- Good lunch arrangement
- Common bonus scheme
- Possibility of flexible working hours, possibly less than 37 hours per week
We have a good and social working environment, where the activities committee provides the opportunity to participate in frequent social events, including cinema trips, paddle tennis, Christmas lunch, etc. We especially embrace the social aspect on our annual summer trip.
Example of a typical task
A typical assignment includes, for example, a project under NIS 2, where you facilitate one or more workshops for the management, board of directors and system owners at the client in either smaller or larger Danish or international companies. The client portfolio is broad, which places demands on your ability as a consultant to navigate different cultures and norms.
Subsequently, you plan the further implementation in collaboration with the customer, including the preparation of policies, procedures, tools and the implementation of management education, awareness training, audits and tests based on the customer's specific needs and maturity level.
You will also be responsible for developing information security policies and procedures in accordance with applicable frameworks, such as ISO, NIST, CMMC, CIS and ISAE3402/3000. You will of course receive support from your colleagues in your daily work. A maturity analysis is often carried out, which forms the basis for assessing the customer's needs and advising on potential improvements to existing policies and technical measures. Discussions about technical solutions take place in collaboration with relevant specialists from UNITAS.
In the ISMS-supporting IT system (GRC system), you document the customer's systems, identified risks and the risk-reducing measures implemented.
As part of the role, you will report to the client's management, which may also include participating in board meetings where you present results and make recommendations for next steps. Information security and compliance tasks are continuous processes.
For certain customers, operational responsibility for information security will be transferred to UNITASIn these cases, the project is completed with handover to UNITAS' service department, which then handles the annual wheel tasks to ensure continued fulfillment of the customer's needs.
During the process, you typically collaborate with 2-3 colleagues. Together, you solve the task, allowing you to focus on your core competencies while benefiting from support from skilled colleagues in other specialized areas.
Interested?
Send your CV or a link to your LinkedIn profile incl. contact information for job@unitas.consulting
If you have any questions about the position, please contact COO Kirsten Brøchner on tel. 28 78 09 23 or on kvb@unitas.consulting
We treat all applications confidentially, and applicants are processed on an ongoing basis. We look forward to hearing from you.