Compliance Specialist

DO YOU WANT THIS POSITION Do you enjoy working with compliance and IT security?

The information security department is seeking a specialist to strengthen Tusass' work with compliance under ISO 27001, GDPR, and ERM.

The position must ensure that Tusass' compliance work is strongly anchored in international standards and legislation, while physical security is systematically documented, audited, and integrated into our maturity journey.

The department needs an employee who can primarily contribute to the development and maintenance of policies, procedures, emergency plans, and controls, while also having a particular focus on physical security.

Primary areas of responsibility

Compliance (main area)

• Develop and maintain policies, procedures, and controls under ISO 27001:2022
• Contribute to documentation, auditing, and follow-up on security controls in SoA and in RISMA.
• Ensure that GDPR requirements (e.g., data minimization, legal basis for processing, access control) are implemented in practice.
• Contribute to Tusass' ERM work through scenarios and risk assessments
• Contribute to the preparation of emergency plans for Tusass.

• Support projects and operations with requirements for physical security (e.g. ISO 27001 Annex A chapters 7 & 11, EN 50600/ISO 22237 for data centers, RC-classified doors, AIA/ADK, CCTV, fire doors)
• Document and integrate physical security into the compliance framework so that it becomes a natural part of audits and controls.

We are looking for a person with, among other things, the following qualities.

• Detail-oriented and systematic with a strong overview of compliance and security.
• Responsible and reliable in relation to legislation and international standards
• IT and security interested, both digitally and physically
• Proactive and problem-solving with a focus on risk assessment and controls.
• Good collaboration skills and the ability to integrate security across projects
• Has experience with compliance and IT security

• An exciting job with varied tasks and close collaboration with colleagues throughout the organization.
• A work environment focused on collaboration, quality, and development.
• Salary and employment conditions by agreement
• Opportunity for professional development and sparring with experienced colleagues

The start date is as soon as possible, but we are of course waiting for the right candidate.

Send CV and application via the application button on the right.

We do not accept applications via email.

If you have questions about the position, you are welcome to contact Chief Information Security Officer Heine Nicolai Kaas at +299 389424 / hek@tusass.gl

We look forward to hearing from you.