Sr Information Security Advisor, Third Party Risk Management

Location

Ballerup, Denmark

Job category

Information Security / Product & Portfolio Strategy

Your impact begins here

As Senior Information Security Advisor, you will lead and mature Novo's Third-Party Risk Management programme, making sure the information security, operational resilience and regulatory risks tied to suppliers and external partners are identified, assessed and managed across the supplier lifecycle. Your work strengthens supply chain security today, protecting the company information, systems and services that keep Novo delivering for people living with serious chronic diseases.

What you'll bring

•  10+ years of experience in Information Security, including significant hands-on Third-Party Risk Management in large, global organisations.

•  Practical experience conducting supplier security assessments, due diligence activities and risk evaluations.

•  Strong knowledge of information security principles, risk management and industry frameworks such as ISO 27001 / 27002, ISO 27036, NIST CSF and SOC 2 audit reporting.

•  An understanding of regulatory and industry requirements affecting third-party and supply chain security, including NIS2 and other relevant cybersecurity obligations.

•  Excellent stakeholder management, communication, facilitation and influencing skills, with the ability to collaborate across diverse business and technology teams and drive change without direct authority.

•  A team-player mindset built on support and collaboration.

Useful, but not essential:

Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor / Implementer, or equivalent information security and risk management certifications.

What you'll do

You will drive and continuously mature the TPRM programme, embedding security requirements into procurement, the ISMS framework and enterprise risk management, and advising on critical and high-risk supplier engagements.

•  Contribute to the ongoing development of TPRM governance, processes, methodologies, reporting and tooling.

•  Keep the programme aligned with Novo security requirements, legal and regulatory obligations including NIS2, industry standards and enterprise risk management practices.

•  Integrate third-party security requirements into procurement, sourcing, contracting, supplier onboarding and lifecycle management.

•  Advise contract owners and stakeholders on security requirements, supplier risk treatment and regulatory obligations, and support the implementation of contractual security requirements and mitigation plans.

•  Collaborate across business and technology areas to strengthen supply chain security and reduce third-party risk exposure.

•  Monitor supplier security and compliance performance and facilitate reassessment activities.

Who you'll work with

You will join the Cyber, Risk & Resilience team within Infrastructure and Information Security, focused on governance, compliance and assurance, and risk management. The team spans corporate governance, ISMS management, board risk reporting, regulatory compliance and Third-Party Risk Management, supporting the Novo CISO and Top Management with high-quality deliveries.

Your closest partners will be business stakeholders, Procurement, Legal and the broader Information Security team, alongside external partners and suppliers. This is a collaborative group that supports one another informally and works together to make information security a vital part of Novo's business. Bringing clarity and momentum across these relationships is how you will reduce risk and move work forward.

What you can expect here

You will work in a global environment where your expertise shapes how Novo manages supplier and supply chain risk. You will be trusted to take ownership, make your voice heard and drive change, while being supported to keep growing through cross-functional collaboration and continuous learning.

What we offer

At Novo, you'll join a global healthcare company with a distinctive culture and strong results, with career development and benefits tailored to your life and career stage.

Salary: For this role, the Annual Base Salary ranges from 742,600.00 to 1,091,600.00 DKK, corresponding to the level of the position. The placement

within the salary range will be assessed during the recruitment process based on the candidate's skills, competencies, knowledge and relevant experience.

Incentives and Benefits: The salary package may include short-term and/or long-term incentives as well as other employee benefits based on position level, location, functional area and relevant market benchmarks.

Learn more about our Reward Philosophy here.

Start now

Your impact begins today. If you are ready to lead Novo's Third-Party Risk Management and strengthen supply chain security across the business, apply for the Senior Information Security Advisor, Third Party Risk Management role by 5 October 2026. Applications are reviewed on an ongoing basis, so we encourage you to apply as soon as possible.

For more information about the role, please contact Ronnie Lykke Madsen at +45 30790930.

We commit to an inclusive recruitment process and equality of opportunity for all our job applicants.