Senior It Security Regulatory Specialist

In this role, you will be our primary expert in IT security compliance, with key responsibilities including:

• staying up-to-date on regulatory requirements and frameworks in IT security across Danske Commodities' active markets.
• conducting in-depth analysis of regulatory IT security requirements (such as NIS2, KRITIS and SOX) and external obligations from customers and energy market stakeholders worldwide.
• collaborating closely with various internal teams as well as external stakeholders and third parties when assessing new markets and products.
• co-developing strategies to incorporate regulatory and partner-specific security requirements into our Information Security Management System.
• maintaining accurate documentation on regulatory and partner requirements as well as compliance measures.
• identifying and proposing improvements to our Information Security Management System to address evolving security obligations, emerging threats and compliance standards.

The Security & Compliance team consists of five specialists, who protect our information assets to ensure a resilient and compliant security framework across all operations. We have diverse backgrounds and interests and are united by our curiosity, teamwork and a commitment to delivering exceptional results.

As you will be working with security regulations, we are looking for someone who is eager to solve complex challenges and who thrives on both working independently as a trusted expert and collaborating with various internal and external stakeholders.

We also imagine that you:

• have a technical background with experience in regulatory compliance or a legal background with strong IT security knowledge.
• are skilled in assessing, anticipating and communicating the impact of regulatory changes on the organisation’s security.
• have expertise integrating external security requirements into IT security frameworks, policies and procedures, especially in regulated sectors.
• are experienced in supporting third-party risk management, particularly in assessing and validating third-party security controls.
• have strong documentation skills, with the ability to maintain detailed records of regulatory requirements, compliance findings and action plans within the Information Security Management System.

Please note, prior knowledge of the energy industry is not required for this role.

You can read more about our recruitment process here. Please note that if you are an international candidate, we will reimburse travel expenses in connection with potential interviews and support you with the relocation process.

We're a tech-driven energy trading company present in 42 markets across five continents. Our +600 people are driven by a need to constantly better things. If you are too, we could very well be the right place for you. You'll join a collective of thinkers and doers. Aspiring chefs, runners, parents, beekeepers, gamers – the list goes on. We're highly specialised experts within our fields. But it’s actually our diversity of ideas we’re most proud of, which is why we continuously work on strengthening an inclusive culture where diverse teams thrive.

Our organisation is flat with an open-door policy. We expect you to care. About your work. About your own and your colleagues’ collective successes. And about the difference we make at Danske Commodities. Together with our parent company Equinor, we have the vision and strength to accelerate the energy transition and make an impact. Like no other.