Information Security Specialist - Karnov Group

Job description

Are you motivated by bridging the gap between governance, risk, and technical implementation? Do you want to play a pivotal role in maturing security across modern SaaS platforms, cloud environments, and emerging AI capabilities? At Karnov Group, we are transforming into a leading digital legal-tech and information services company. We are looking for an Information Security Specialist to join our pan-European team. In this role, you will ensure our security standards, policies, and regulatory obligations are effectively embedded into our digital products, development practices, and cloud architecture. About the job | Governance, Risk and Technical Assurance Your primary focus will be to understand, assess and translate customer security, AI and privacy requirements and regulatory requirements into a coherent set of information security requirements that define Karnov Group’s organisational security level and the security level for our digital products. You will ensure that the requirements are relevant, operationally applicable and communicated to our technical teams. At the same time, you support day-to-day compliance activities by keeping security controls and evidence up to date, maintain security policies and principles as part of managing and developing our Information Security Management System (ISMS). Among other things, you will be responsible for: · Product & Development alignment: Collaborate with product, development, and architecture teams to define security baselines for cloud platforms, APIs, and application development (DevSecOps). · Customer assurance & Sales enablement: Maintain customer facing technical security documentation and collaborate with sales/legal teams to address security questionnaires and customer security requirements. · Supply Chain Risk Management: Conduct risk and security assessments of third-party vendors, SaaS tools and AI service providers · Controls & ISMS Management: Support the continuous improvement of our Information Security Management System (ISMS), monitoring control effectiveness and providing actionable remediation guidance. · Cross-European Collaboration: Work closely with Information Security, Privacy, Security Operations and Technical teams across our European entities to coordinate cohesive security initiatives. You will be part of the Group Information Security, Privacy and Compliance team. You will join a competent team and a centrally located workplace in Copenhagen — near Nørreport Station. Partly remote work is part of our work-life-balance. About you | Excellent analytical & problem-solving skills | Stakeholder management skills You are a security professional who understands both the regulatory landscape and how modern cloud/SaaS platforms operate. You don’t view security as a blocker, but as an enabler for business growth and customer trust. Required qualifications: · Min. 3–5 years of experience in Information Security, IT Risk, or Technical GRC roles (ideally within SaaS, FinTech, LegalTech, or cloud-native environments). · Proven understanding of security frameworks such as ISO/IEC 27001, ISAE 3402, SOC 2, CIS Benchmarks, and NIS2. · Solid grasp of cloud environments (GCP/Azure), application security principles (OWASP), and modern software delivery lifecycles. · Experience in conducting vendor risk assessments and answering customer security evaluations. · Strong stakeholder management: Ability to translate complex technical risks into clear business language for non-technical stakeholders. · Fluency in English (both written and verbal) is required; additional European languages (Spanish, French, Danish, or Swedish) are a plus. · Bachelor’s degree in Computer Science, Information Security, Business Information Systems, or equivalent. Preferred certifications (or experience with): Relevant certifications such as ISO 27001 Lead Implementer/Auditor, CRISC, CISM, CISA, CCSP, or cloud security credentials (e.g., Azure AZ-500 / SC-100, GCP Professional Cloud Security Engineer). About Us | Psychological Safety | "we walk the talk" Now is the perfect time to become part of Karnov Group! At Karnov Group, you will experience a company in rapid development, where the business is being rethought and digitized, and where we are continuously transforming from a traditional publishing house into a modern information technology company. Karnov Group is a leading provider of critical information across law, tax, auditing and accounting in Denmark, Sweden, Norway, France and Spain. Our solutions are based on reliable knowledge authored by experts and delivered through technology. Psychological Safety is a cornerstone that supports our cultural values. In our daily operations, we act in accordance with and live up to these values by simply ”walk the talk”. You therefore become part of an attractive work culture and a dynamic environment within an ambitious company, with talented colleagues who support and respect one another. We believe that close collaboration across the entire company helps us serve our customers in the best possible way. We look forward to hearing from you! If you have any questions regarding the role or the process, feel free to contact Pia Lundberg Allentoft Miller, Group Chief Information Security Officer (Group CISO), via e-mail: .