Remote Compliance and Risk Manager

Summary

Join Neptune Software as Compliance and Risk Manager, overseeing risk and compliance, information security management system (ISMS), and promoting data protection. This is a remote opportunity in Portugal or hybrid in Norway.

Requirements

• Bachelor's degree in Information Technology, Computer Science, or related field
• Relevant certifications (e.g. CISSP, ISO 27001 ) preferred
• Proven experience in information security management, compliance, and governance, in a software or technology-driven environment
• Strong knowledge of ISO 27001 standards, information security best practices, and regulatory requirements in the field (e.g., GDPR, NIS2 )
• Good communication and interpersonal skills, with the ability to collaborate effectively across departments and influence stakeholders at all levels
• Analytical mindset with attention to detail and problem-solving abilities

Responsibilities

• Governance, Risk, Compliance
• Risk Register (documenting Risks and plans for mitigation)
• Also working with the other teams to make sure security functions such as Vulnerability Management and Application Security are covered
• Internal auditing
• Policy development
• Vendor agreements (Third Party security risk assessments)
• Maintain and further develop for the Information Security Management System (ISMS)
• Coordinate task and efforts in the ISMS
• Ensure the ISMS comply with ISO 27001
• Maintain the ISO 27001 certification for the ISMS
• KPI’s/Metrics on information security

Benefits

• A market competitive package including a base salary and bonus
• Our comprehensive benefits package includes health insurance, pension
• Career advancement opportunities