IT Security Assessor

Role Overview: As an IT Security Assessor at our company, you will be responsible for critically evaluating the information security programs, policies, and governance of acquired companies to ensure compliance with Novo Nordisk security requirements. You should have a robust understanding of security frameworks and regulatory standards to excel in this role. Key Responsibilities: - Evaluate the security systems of acquired entities with respect to established safety requirements. - Assess the information security program, policies, and governance to ensure alignment with standards like NIST, ISO 27001, and CIS. - Evaluate network topology, cloud environments, and data centers for security vulnerabilities. - Identify any legacy systems and unsupported software that may pose risks. - Verify compliance with industry regulations and review vendor contracts related to security. - Assess incident response plans, disaster recovery capabilities, and the overall security awareness and culture within the organization. Qualifications Required: - Strong knowledge of information security frameworks such as NIST, ISO 27001, etc. - Experience with regulatory requirements like GDPR and HIPAA. - Expertise in assessing network and data center security along with an understanding of legacy systems and risk assessment. - Ability to conduct audits, compliance checks, and knowledge of data classification and encryption practices. - Familiarity with incident response, disaster recovery procedures, and cloud security assessments. - Certification in information security (CISSP, CISM, etc.) and familiarity with third-party risk management would be beneficial for this role. (Note: Other details about flexibility in work arrangements and focus on compliance within the information security sector for businesses with integration needs are also highlighted in the job description.),