Senior ISMS & NIS2 Implementation Lead – ISO 27001 & Compliance – 13 Months in Copenhagen/Hybrid

Kolding/Hybrid

The assignment is; assessment of which operational risk and security risk they have. They have known risk in their risk register, but as an overall risk assessment has never been done before, the number of unknow risk are potentially high, and impact of those therefore unknown. Knowing what risks they have – means they can make informed decision and engineer fit for purpose security solutions. Important profile distinction: This is not primarily an IT/GRC risk role. The candidate must have sufficient OT and industrial understanding to determine how technical weaknesses, failures or compromises translate into operational and business risk. Duties Plan, structure and drive end-to-end OT cyber and operational risk identification and assessments across complex industrial environments, including identification of unknown or undocumented risks. Apply IEC 62443, particularly IEC 62443-3-2, including risk assessment, zones and conduits, threat scenarios and Target Security Levels (SL-T), and translate identified risks into security requirements and treatments. Assess asset/system criticality, threats, vulnerabilities, likelihood, operational consequences, inherent/residual risk and appropriate risk treatments. Demonstrate strong OT/industrial domain knowledge, including SCADA, PLCs, HMIs, engineering workstations, OT networks, remote/vendor connectivity and legacy/EOL technology. Analyse OT architectures and dependencies, including zones, conduits, trust boundaries, critical data flows and dependencies on IT, vendors/OEMs, remote access and external services. Lead structured risk-identification workshops with Technical Authorities, Engineering, Operations, Security and asset/system owners, using strong facilitation skills to uncover undocumented risks and challenge assumptions. Assess risk in its operational and business context, considering availability, safety, production, environment, maintainability and regulatory/compliance impact, rather than technical severity alone. Consolidate individual findings into a consistent portfolio-level OT risk picture, identifying systemic risks, asset-specific risks, dependencies, concentrations and recurring risk themes. Mature OT risk registers and risk-management processes, including consistent risk statements, ratings, ownership, traceability, prioritisation and management-level reporting across organisational boundaries. Translate prioritised risks into risk-treatment requirements and high-level solution scopes, enabling management, Technical Authorities and Engineering to make informed, risk-based decisions and progress subsequent engineering activities. Skills Relevant technical/security education or equivalent senior professional experience. Strong practical OT/ICS security and industrial risk-assessment experience. Demonstrated practical knowledge of IEC 62443 and ISO/IEC 27001-family risk management, particularly IEC 62443-3-2 and ISO/IEC 27005. Experience applying risk-management principles within industrial/OT environments, not solely traditional IT/GRC environments. BSc/MSc in Cyber Security, Automation/Control Engineering, Electrical Engineering, Industrial Engineering, Risk Management or related discipline. IEC 62443 training/certification. ISO/IEC 27001 and/or ISO/IEC 27005 training, certification or recognised risk-management qualification. Experience with ISO/IEC 27019 in the energy/utility sector. ISO describes ISO/IEC 27019:2024 specifically as information-security controls for the energy utility industry. GICSP, CISSP, CISM, CRISC or comparable relevant professional certification. Experience from energy, utilities, renewables or comparable critical infrastructure. Fluent in English. Education – Relevant technical/security education or equivalent senior professional experience. Practical Information – Work setup: Office presence preferable – 2 days per week. Remote work is optional (travel for workshops etc. is expected).

Copenhagen/Hybrid

Imagine a future where you provide support and help to create further growth in a leading international organisation. Join us in this role where you’ll create business value by developing and boosting the functionality of IT products. You’ll be responsible for enabling both web-based and Windows clients with .Net applications and visualizing complexity in a simple, user-friendly way. You’ll be part of a development team where you, together with your colleagues, will enhance and support business applications, incl. Fuel Trading, Logistics Management, Power Distribution Management, etc. As a team, we follow the principles of Lean-Agile framework, emphasizing collaboration, continuous improvement, and cross-functional alignment to deliver our goals efficiently. You’ll play an important role in: programming in Angular, Azure/AWS Cloud, .NET Stack (.NET 8/9, ASP.NET Core, C#, Web API), microservices & distributed systems, Kafka (or similar) and databases (PostgreSQL, SQL Server) AI-assisted development (GitHub Copilot): Use Copilot to speed up boilerplate, refactoring, and unit test generation in .NET/Angular, while maintaining code ownership through reviews, standards, and automated tests. working closely with internal and external consultants and key resources on the business side collaboration & problem solving: proactively identifying and addressing technical challenges, tackling blockers, and ensuring continuous delivery of high-quality technical solutions. participating in daily stand-up meetings, sprint reviews, and planning meetings with Danish- and Malaysian-based colleagues ensuring optimization of the agile processes To succeed in the role, you: have a proven track record in and experience with development in Microsoft .NET C#, GitHub and Copilot and advocate clean coding principles and development of best practices, such as SOLID or DRY and be object-oriented are familiar with the Linux and Windows Server platforms, you are able to switch and enhance the applications built by legacy to the latest technologies and have hands-on experience operating and maintaining Linux environments and containerized applications using Docker or Podman have experience working with HTML5, SASS, Angular, Typescript/JavaScript, Database design, PostgreSQL, SQL Server, RESTful services, security/performance, and Cloud Platform have network troubleshooting skills to support applications deployed in air-gapped server environments are experienced in creating robust CI/CD pipelines and deploying solutions within Kubernetes environments. have knowledge of OPC UA and its application in industrial system integration and communication have a relevant bachelor’s degree or a relevant Microsoft certification for .NET if you are familiar with Golang, it would be an advantage Practical Information Duration: 6 months. Work setup: Hybrid setup with minimum 3 days onsite per week. The consultant must be based in Denmark.

Copenhagen

Accuro is looking for highly experienced freelance Network Security specialists for long-term opportunities supporting large enterprise customers in Denmark. Our client has a significant and ongoing demand for senior network security expertise across a small number of large, complex and business-critical enterprise environments. We are therefore looking for Network Security Architects, Principal Security Consultants, Senior Network Security Advisors and Lead Network Security Engineers with the technical depth and enterprise experience to take ownership of demanding customer-facing assignments. For the right profile, opportunities may cover architecture, advisory, implementation, transformation, migration and optimisation of enterprise network security solutions. We are exclusively looking for experienced specialists who can operate independently at senior, lead, principal or architect level. Areas of expertise We are particularly interested in consultants with deep enterprise experience within several of the following areas: Palo Alto Networks Fortinet / FortiGate Cisco ASA Cisco Firepower Enterprise Firewall Architecture Network Security Architecture Network Segmentation Microsegmentation Zero Trust Network Architecture Secure Enterprise Connectivity Enterprise VPN Remote Access Security Security Policy Design and Governance High Availability firewall environments Complex firewall migrations and transformations Advanced Network Security Additional highly relevant areas include: Zscaler SASE Cisco ISE Cisco SGT Cisco NDR Secure Access Architecture Threat Prevention Network Detection and Response Security architecture within large data centre environments Application Delivery & ADC Senior expertise within application delivery and traffic management is also relevant, including: F5 BIG-IP F5 LTM F5 AWAF / ASM F5 APM F5 AFM SSL/TLS Application traffic management Enterprise load balancing F5 Virtual Edition / rSeries F5 Distributed Cloud Automation Relevant automation experience includes: Ansible Terraform Python APIs Infrastructure as Code Automated security configuration and deployment The profile Typical candidates will have 10+ years of relevant professional experience and extensive experience from large enterprise environments. You should be comfortable taking responsibility for: Network security architecture and solution design Enterprise firewall strategy Complex security transformations and migrations Segmentation and Zero Trust initiatives Advanced troubleshooting and root-cause analysis Security design reviews and technical governance Technical leadership End-to-end technical ownership Customer-facing security advisory Translating business and security requirements into technical solutions Working directly with large enterprise end customers Technical documentation and operational handover Experience from managed services, IT outsourcing, large international organisations, regulated industries or highly business-critical environments is particularly relevant. Certifications Relevant senior and expert-level certifications are highly valued, including: Cisco CCNP Security Cisco CCIE Security Advanced Palo Alto Networks certifications Advanced Fortinet certifications Other comparable expert-level network security certifications Extensive enterprise experience demonstrating an equivalent level of expertise is also relevant. The opportunities Our client has a substantial and ongoing requirement for experienced Network Security specialists supporting large enterprise customers in Denmark. Assignments will typically be long-term freelance engagements, and the right consultants may have opportunities to continue across different projects and enterprise customer environments over time. Depending on the assignment, there will typically be flexibility regarding remote and hybrid working, combined with on-site presence when required. Interested? If you are an experienced Network Security Architect, Principal Consultant or senior technical specialist with a strong enterprise background, we would be interested in receiving your updated CV. Please include your key technologies, certifications, major enterprise assignments, availability and preferred work setup.

Remote / Hybrid

We are looking for an experienced Senior System Manager, Application Manager, or IT Service Transition Specialist with proven experience managing Dassault Systèmes 3DEXPERIENCE (3DX) environments. Our client, a large international manufacturing company, is transitioning from CATIA/ENOVIA V5 on-premises to 3DEXPERIENCE Public Cloud. The assignment focuses on defining, documenting, and implementing the operational management processes required to ensure stable platform operations, effective service transition, and controlled ongoing development. The technical and functional implementation is handled by an external partner. This is not a hands-on development or technical implementation role. Instead, the consultant will provide expert guidance on how to manage, govern, and operate a 3DEXPERIENCE platform effectively. Key Responsibilities Environment Management: Define and implement processes for managing development, test, and production environments within the 3DEXPERIENCE ecosystem. System Configuration Management: Establish procedures for configuration control, version management, change management, and documentation. Release & QA Management: Define release processes, quality assurance, testing coordination, approvals, and controlled transitions into production. SLA, Monitoring & Incident Management: Establish processes for monitoring platform stability, managing incidents, and ensuring appropriate service levels. Support Management: Define support structures, escalation procedures, and collaboration with internal teams and external service providers. Service Transition & Governance: Establish operational responsibilities and processes between IT, business stakeholders, and the technical implementation partner. People, Organisation & Licence Management: Define governance and operational procedures for user administration, roles, access, and licence management. Process Implementation: Ensure that operational processes are documented, implemented, and embedded within the organisation. Required Qualifications Proven experience with 3DEXPERIENCE systems in an operational management, application management, platform governance, or service transition capacity. Practical understanding of how 3DEXPERIENCE environments are managed across development, test, and production. Strong experience defining and implementing IT operational processes. Solid knowledge of ITIL, IT Service Management, and Service Transition principles. Experience with environment management, configuration management, release management, and change management. Experience coordinating internal IT teams, business stakeholders, and external technical partners. Strong communication, stakeholder management, and documentation skills. Highly Desirable Qualifications Experience with 3DEXPERIENCE Public Cloud, including its operational processes and governance model. Experience with ENOVIA, CATIA, and other Dassault Systèmes PLM solutions. Experience transitioning PLM platforms from on-premises infrastructure to cloud-based services. Experience in manufacturing, engineering, or product development environments. Experience with ServiceNow or similar ITSM platforms. Important: Hands-on development, coding, or technical configuration of 3DEXPERIENCE is not required. However, previous experience managing or establishing operational processes for 3DEXPERIENCE environments is essential. Ideal Candidate Profile The ideal candidate is an experienced 3DEXPERIENCE System Manager, Application Manager, Platform Operations Specialist, or Service Transition Consultant who understands the operational processes required to manage a business-critical 3DX platform. You understand how development, testing, releases, production operations, support, and configuration management interact within the 3DEXPERIENCE ecosystem. You can translate your previous 3DX operational experience into practical processes and governance structures, working closely with internal IT teams, business stakeholders, and the external implementation partner. The focus is on ensuring stable operations, controlled releases, and sustainable management of the 3DEXPERIENCE platform, rather than developing or configuring the platform itself. Practical Information Duration: 3–6 months Expected start date: 23 November 2026 Location: Primarily remote, with occasional onsite attendance Application deadline: 12 November 2026