Security guard

Information Security Specialist in Denmark

To jest oferta typu eures, co oznacza, ze pracodawca zlozyl juz wniosek o zatrudnienie osob spoza Stanow Zjednoczonych.

Pracodawca: Impact Fund Denmark (tidl. Investeringsfonden for Udviklingslande)
Gdzie: Denmark
Miejsca: 1
Wiza: eures
Opublikowano: 2026-10-13

Czym bedziesz sie zajmowac

Are you motivated by making information security work in practice - from supporting security operations and implementing controls to helping colleagues use technology securely? Join our team as Information Security Specialist at Impact Fund Denmark (IFDK). At IFDK, you join a mission-driven organisation with a clear purpose - to finance projects that bring sustainable development to life, from forestry in Paraguay to solar energy in Brazil and diagnostics in Bangladesh. Here is what you get with us: A hands-on role supporting and improving our day-to-day information security practices Collaboration with highly skilled IT professionals in a friendly and inclusive culture Access to the full suite of Microsoft enterprise tools in a modern and tech-driven environment The job We are continuing to strengthen how information security is embedded in our daily work, tools and processes. As part of our Technology & Operations team, you will support the practical implementation and daily operation of our information security efforts. You will work closely with the Technology team and colleagues across the organisation to ensure that security controls, processes, awareness activities and follow-up routines are clear, relevant and used in practice. You will contribute to a modern security environment and help us maintain a strong security posture in a pragmatic, structured and service-minded way. The role combines technical insight, operational follow-up and communication with colleagues, making it ideal for someone who wants to work close to the technology and help turn security requirements into everyday practice. Main tasks and responsibilities Security operations and controls: Design and support the implementation, monitoring and continuous improvement of security controls across the enterprise e.g. via our Microsoft 365 environment, including Entra ID, Defender and Purview. This also includes co-owning the roadmap of technical implementations and future features analysis within the Microsoft 365 eco-system. Risk, documentation and follow-up: Contribute to risk assessments, documentation and follow-up on security requirements, incidents, vulnerabilities and improvement actions. Incident response and monitoring: Support detection, response and follow-up on security events, alerts and incidents, helping ensure that issues are handled in a structured and timely way. Awareness and guidance: Help colleagues understand and apply good security practices through practical guidance, communication and awareness activities. Third party vendor assessment: Contribute to the assessment of both new and existing vendors. Threats and vulnerabilities: Perform proactive threat hunting across Microsoft Defender and related security platforms to identify suspicious activity and emerging threats. Own and coordinate the vulnerability management process, including identification, prioritisation, remediation tracking and reporting. Identity and Access Management (IAM): Own and develop security capabilities related to identity, authentication and access management. This includes identity lifecycle processes, joiner-mover-leaver controls, access reviews, role-based access control (RBAC), privileged access management (PAM), multi-factor authentication, conditional access, and continuous improvement of identity-related security controls across the enterprise. Your qualifications and experience Relevant education within Information Security, Cyber Security, Information Technology or a related field. Security certifications and Microsoft security training are considered an advantage but are not required. Experience from a role where you have contributed to information security initiatives, implementation of controls, risk assessments or security operations - preferably in a regulated environment or the financial sector. Familiarity with relevant security frameworks and requirements, such as ISO 27001/2, DORA or similar. Experience with security documentation, report