Qualifications
We prefer candidates who have:A higher education degree, at least at the bachelor level, in law, information security, technology, social sciences, or equivalent.Experience with information security, GRC (governance, risk & compliance), risk work, and/or compliance.A minimum of 2–5 years of experience, or more for senior roles.Familiarity with frameworks such as ISO 27001, ISO 27005, NIST SP 800-53, and NSM's fundamental principles.Experience with implementation and operationalization of management systems.A solid understanding of regulations such as the Security Act, the Personal Data Act, and the Digital Security Act.Strong communication skills in Norwegian, both written and verbal.It is an advantage if you also have:Experience with supplier monitoring or internal auditing.Experience from regulated sectors or OT environments.Expertise in process management or change management.
About the job
Are you ready to help secure the digital society of the future?
We are enhancing our focus on secure digitalization and are currently looking for an Information Security Advisor. In this role, you will engage in information security, risk management, and regulatory compliance within complex projects, often at the intersection of IT and OT.
You will collaborate within interdisciplinary teams and contribute to developing and improving management systems, conducting maturity assessments, risk analyses, and gap analyses, while providing guidance on compliance with regulations such as the Security Act, NIS2, DORA, and GDPR. Our clients operate in critical sectors including energy, defense, industry, transportation, and health. We are seeking individuals who can connect security expertise with business understanding.
We welcome colleagues with diverse experiences and expertise; from those with a few years of experience looking to further develop, to those with several years of experience capable of contributing at a more strategic level.
Common to all roles is an interest in secure digitalization, a sound understanding of frameworks and regulations, and the ability to translate this into practical and relevant measures for our clients.
About AFRY
At AFRY, we aim to enable Norway to do more with less. Our solid methodologies and strong culture ensure that we remain a preferred partner. We do not take this position for granted. It is the composition and teamwork that make us a strong societal actor. Through our services, we strive to create communities that foster growth for businesses and organizations, and enhance the quality of life for citizens. Our achievements lead to a better society for the future. We invite you to be part of this important team.AFRY delivers services in engineering, design, digitalization, and consulting. We consist of dedicated experts in industry, energy, and infrastructure, creating lasting solutions for future generations. With Nordic roots and global reach, AFRY is well-positioned to make a difference.