Senior GRC Consultant

Telenor Cyberdefence AS is a wholly owned, newly started Nordic cyber security company in the Telenor Group. Telenor Cyberdefence AS' ambition is to become a leading MSSP (Managed Security Services Provider) in the Nordic market, among other things by using Telenor's unique access to threat intelligence to support our services. In addition to delivering modern managed security services, Telenor Cyberdefence AS will also offer specialist expertise through consultancy services and testing of infrastructure / applications with our Offensive Security team.

Join our innovative and competent team at Telenor Cyberdefence in the position as Senior GRC Consultant - at our office in Fornebu. 

We are looking for an experienced Senior GRC Consultant to join our cybersecurity team in Oslo. You will work with customers on complex challenges across Governance, Risk and Compliance (GRC), helping organizations understand their risk exposure, meet regulatory requirements, and build effective and sustainable security governance.

About the Role

As a Senior GRC Consultant, you will advise customers on information security governance, cyber risk, regulatory compliance, and security management.

You will work both strategically and hands-on, translating regulatory and framework requirements into pragmatic controls, processes, and improvement initiatives. You will be expected to operate as a trusted advisor to both management and technical stakeholders.

Key responsibilities:

• Lead and support GRC assessments, gap analyses, and security improvement programs.

• Support customers with the implementation and improvement of Information Security Management Systems (ISMS).

• Advise organizations on cybersecurity regulations, standards, and industry frameworks

• Perform cyber and information security risk assessments.

• Develop security governance structures, policies, controls, and processes.

• Support customers in preparing for audits, certifications, and regulatory requirements.

• Translate complex regulatory and security requirements into practical business actions.

• Contribute to the development of our GRC services, methodologies, and customer offerings.

Required Experience

• We are looking for strong practical experience with several of the following:

• ISO/IEC 27001, including implementation, gap assessments, and ISMS development.

• NIST frameworks, such as the NIST Cybersecurity Framework.

• NIS2 Directive and associated cybersecurity requirements.

• GDPR, particularly from an information security and risk perspective.

• DORA and ICT risk management requirements.

• Cybersecurity risk management and security governance.

• Experience with ISO/IEC 42001 and AI governance is considered a strong advantage.

What We Are Looking For

• Several years of relevant experience within cybersecurity, GRC, risk management, or information security.

• Strong consulting and stakeholder management skills.

• Ability to communicate security and regulatory topics clearly to both executives and technical specialists.

• A pragmatic mindset and the ability to turn requirements into actionable improvements.

• Ability to work independently and take ownership of customer engagements.

Language and Security Requirements

• Fluent Norwegian, both written and spoken.

• Strong English communication skills, both written and spoken.

• Norwegian citizenship.

• Ability to obtain the required security clearance.

We offer:

• You will become part of a highly skilled cybersecurity environment where you can work across different industries and customer challenges.

• The opportunity to influence and develop our GRC services while building expertise across cybersecurity governance, regulation, risk, and emerging areas such as AI governance and ISO 42001.

• Competitive compensation package and modern office at Telenor Fornebu.

• An informal and friendly workplace culture where colleagues support each other.

• Opportunities for growth and relevant training, certifications and conferences.

Help our customers move beyond compliance and build security governance that creates real business value.

Please send your application. We will conduct interviews ongoing as we receive applications.