Are you motivated by bridging the gap between governance, risk, and technical implementation? Do you want to play a pivotal role in maturing security across modern SaaS platforms, cloud environments, and emerging AI capabilities?
At Karnov Group, Karnov Group Denmark A/S is transforming into a leading digital legal-tech and information services company. Karnov Group Denmark A/S is looking for an Information Security Specialist to join Karnov Group Denmark A/S's pan-European team. In this role, you will ensure Karnov Group Denmark A/S's security standards, policies, and regulatory obligations are effectively embedded into Karnov Group Denmark A/S's digital products, development practices, and cloud architecture.
About the job | Governance, Risk and Technical Assurance
Your primary focus will be to understand, assess and translate customer security, AI and privacy requirements and regulatory requirements into a coherent set of information security requirements that define Karnov Group’s organisational security level and the security level for Karnov Group Denmark A/S's digital products. You will ensure that the requirements are relevant, operationally applicable and communicated to Karnov Group Denmark A/S's technical teams. At the same time, you support day-to-day compliance activities by keeping security controls and evidence up to date, maintain security policies and principles as part of managing and developing Karnov Group Denmark A/S's Information Security Management System (ISMS).
Among other things, you will be responsible for:
- Product & Development alignment: Collaborate with product, development, and architecture teams to define security baselines for cloud platforms, APIs, and application development (DevSecOps).
- Customer assurance & Sales enablement: Maintain customer facing technical security documentation and collaborate with sales/legal teams to address security questionnaires and customer security requirements.
- Supply Chain Risk Management: Conduct risk and security assessments of third-party vendors, SaaS tools and AI service providers.
- Controls & ISMS Management: Support the continuous improvement of Karnov Group Denmark A/S's Information Security Management System (ISMS), monitoring control effectiveness and providing actionable remediation guidance.
- Cross-European Collaboration: Work closely with Information Security, Privacy, Security Operations and Technical teams across Karnov Group Denmark A/S's European entities to coordinate cohesive security initiatives.
You will be part of the Group Information Security, Privacy and Compliance team. You will join a competent team and a centrally located workplace in Copenhagen — near Nørreport Station. Partly remote work is part of Karnov Group Denmark A/S's work-life-balance.
About you | Excellent analytical & problem-solving skills | Stakeholder management skills
You are a security professional who understands both the regulatory landscape and how modern cloud/SaaS platforms operate. You do not view security as a blocker, but as an enabler for business growth and customer trust.
Required qualifications:
- Min. 3–5 years of experience in Information Security, IT Risk, or Technical GRC roles (ideally within SaaS, FinTech, LegalTech, or cloud-native environments).
- Proven understanding of security frameworks such as ISO/IEC 27001, ISAE 3402, SOC 2, CIS Benchmarks, and NIS2.
- Solid grasp of cloud environments (GCP/Azure), application security principles (OWASP), and modern software delivery lifecycles.
- Experience in conducting vendor risk assessments and answering customer security evaluations.
- Strong stakeholder management: Ability to translate complex technical risks into clear business language for non-technical stakeholders.
- Fluency in English (both written and verbal) is required; additional European languages (Spanish, French, Danish, or Swedish) are a plus.
- Bachelor’s degree in Computer Science, Information Security, Business Information Systems, or equivalent.
Preferred certifications (or experience with):
Relevant certifications such as ISO 27001 Lead Implementer/Auditor, CRISC, CISM, CISA, CCSP, or cloud security credentials (e.g., Azure AZ-500 / SC-100, GCP Professional Cloud Security Engineer).
About Karnov Group Denmark A/S | Psychological Safety | "Karnov Group Denmark A/S walks the talk"
Now is the perfect time to become part of Karnov Group! At Karnov Group, you will experience a company in rapid development, where the business is being rethought and digitized, and where Karnov Group Denmark A/S is continuously transforming from a traditional publishing house into a modern information technology company. Karnov Group is a leading provider of critical information across law, tax, auditing and accounting in Denmark, Sweden, Norway, France and Spain. Karnov Group Denmark A/S's solutions are based on reliable knowledge authored by experts and delivered through technology.
Psychological Safety is a cornerstone that supports Karnov Group Denmark A/S's cultural values. In Karnov Group Denmark A/S's daily operations, Karnov Group Denmark A/S acts in accordance with and lives up to these values by simply ”walk the talk”. You therefore become part of an attractive work culture and a dynamic environment within an ambitious company, with talented colleagues who support and respect one another. Karnov Group Denmark A/S believes that close collaboration across the entire company helps Karnov Group Denmark A/S serve Karnov Group Denmark A/S's customers in the best possible way.
Karnov Group Denmark A/S looks forward to hearing from you!
If you have any questions regarding the role or the process, feel free to contact Pia Lundberg Allentoft Miller, Group Chief Information Security Officer (Group CISO), via e-mail: pia.miller@karnovgroup.com.
