Information Security Management System Specialist

Department
IT, Finance & Compliance
Nils Foss Allé 1
3400 Hillerød

Country
Denmark

Every day, food and agricultural producers around the world make decisions worth millions based on measurements from a FOSS instrument. Roughly 85% of the world's milk production and 80% of the grain traded on the world market is tested using a FOSS solution, and we supply the 100 largest food companies on the planet.

FOSS was founded in Hillerød in 1956 by Nils Foss, who wanted to replace slow laboratory work with fast, reliable analysis. Seventy years later we are still family-owned, still headquartered in Hillerød, and still working on the same problem at a much larger scale.

The role
FOSS runs a mature, ISO 27001:2022-certified information security management system with obligations under NIS2 across several European entities.

We are looking for our new Information Security Management System (ISMS) Specialist. This role is for someone early in their information security career who wants to build real depth in governance, risk and compliance rather than watch it from the outside. You will work directly with the Head of Information Security, who will be your sponsor, sparring partner and safety net.

I the role, you will:

• Implement and operate our systems-based ISMS tool - configuring the platform, migrating our existing control framework, documentation and risk register into it, and making it the single source of truth rather than one more place to update.
• Drive control implementation with the business. Our controls live in IT, HR, Legal, R&D, Facility and our production sites. You will be the one who sits down with control owners, translates a requirement into something practically doable, and follows it to completion.
• Validate controls. Collect and assess evidence, test whether controls actually work as described, document findings and track remediation to closure.
• Support the audit cycle. Prepare for internal and external audits. Gather evidence and help our international sites get ready.
• Maintain the documentation set - policies, procedures, records and the Statement of Applicability - and support in keeping the management review and reporting cycle running.
• Contribute to awareness and training activities across the organization.

Expect to travel a few times a year to our European sites - mostly a few days at a time, to work with local teams on control implementation and audit readiness. It is one of the better parts of the job: it is much easier to help people once you have seen their reality.

Who we are looking for
Requirements:

• A relevant education - for example a Professionsbachelor (PBA) in IT Security, Datamatiker(Computer science) with a security specialization, a bachelor's degree in information security, or equivalent.
• Working knowledge of ISO/IEC 27001 and ISO/IEC 27002 - you understand what an ISMS is, what a control is, and why the difference between "documented" and "implemented" matters.
• Professional-level English, written and spoken. This is our corporate language.
• Structured, thorough and comfortable finishing things - a lot of this job is following up until something is genuinely done.

Nice to have:

• Certifications such as ISO 27001 Lead Implementer or Foundation.
• Danish language skills - a clear advantage in our Danish organization, but not a requirement.
• Exposure to NIS2, the CIS18 Controls framework, or GRC/ISMS platforms.
• Familiarity with the Microsoft security stack (Defender, Sentinel, Intune, Purview).
• Experience from a manufacturing, life-science or otherwise regulated environment.

Who you are:

• Outgoing. You will spend a large part of your week talking to people who do not work in security and do not think about it daily. You need to enjoy that, not endure it.
• Solution-oriented. You come back with a workable option rather than a list of reasons something cannot be done.
• Curious and willing to learn. We do not expect you to arrive fully formed. We expect you to want to get there.
• Trustworthy with sensitive information.

This is a full-time, onsite position at the FOSS Innovation Centre in Hillerød. Daily presence in the office is important to us - this role depends on being close to the colleagues and control-owners you will be working with.

What we offer

• A small, close-knit security team where your work is visible and your scope grows with your ability.
• Direct mentoring from the Head of Information Security, and ownership of a concrete, high-value project from day one.
• Exposure to the full breadth of an international ISMS - governance, audits, risk, technical controls and our European sites.
• A global, family-owned company with strong engineering traditions and colleagues who take quality seriously.
• Support for relevant certification and further training.

We would love to hear from you!
Submit your application by using the link below. Please note that only applications sent through the link will be considered. If you have questions regarding the role, please contact Christian Ryge, Head of Information Security, at Se telefonnummer på jobbank.dk.

We look forward to receiving your application!

FOSS is committed to maintaining an inclusive and diverse culture. You can help us sustain an unbiased recruitment process by not including photo and age in your application.

About FOSS
Today, more than 8 billion people around the world are dependent on nutritional food. Tons of food being produced in a million different ways and under varying conditions, creating challenges all the way from field to fork. One of them, obviously, is the effect it has on climate change.

FOSS helps the world’s 100 biggest food companies, and more than 40,000 others around the world navigate exactly that with intelligent, data-driven and innovative analytical solutions. We are making sustainability a better business, and we’re doing so as the global market leader in our field – improving food quality, minimizing food waste, ensuring food safety, and securing fair payment.

Join a pioneering and innovative company in the food and agriculture industry. A company on a mission, with offices all around the world and 1,750 talented colleagues across 34 different countries.