Senior GRC Consultant (Cyber & Information Security)

About this role

We're looking for an experienced cyber and information security consultant in the GRC domain who has hands-on experience building automation and/or agentic tools into their work. What you'll do We're scaling our GRC services team, a team dedicated to making governance, risk, and compliance of cyber and information security more efficient, effective, and valuable to organisations. We do this by automating processes through software and agentic tools, and by defining tasks, inputs, and outputs more clearly than is currently the norm.

As our client list grows, we need someone who can deliver GRC consulting from day one and open up new paths to delivery by developing and implementing our own tools and automations. This role is open to being shaped by your own passions and talents, whether that's software development, sales and marketing, or deep industry knowledge. In this role, you'll definitely be: Helping companies implement and comply with laws, standards, and frameworks like NIS 2, ISO 27001, and the CIS Controls Driving projects independently and managing senior stakeholders Influencing decisions on cyber and information security at some of Denmark's leading companies and public institutions Depending on your experience and interests, you may also be: Developing your own client networks Programming and deploying your own agentic software tools Performing technical cybersecurity tasks in client environments Building new services from the ground up, targeting industries or problems you understand uniquely well What you'll bring You may be a great fit for this role if you have delivered GRC consulting for at least three years, ideally across several clients at once.

On top of that, you should have: Automated GRC tasks with software and LLMs, refining the output until it beats human work in at least some aspects Driven the delivery of software products in collaboration with developers Gotten up to speed on new regulatory requirements under tight deadlines Fought the least valuable and most dull parts of GRC work while defending the value of good GRC against sceptics and cynics The ideal candidate must be fluent in English – Danish is a plus, but not required – and we value a relevant master's degree or equivalent hands-on experience.