Information Security Specialist

Are you motivated by making information security work in practice — from supporting security operations and implementing controls to helping colleagues use technology securely? Join our team as Information Security Specialist at Impact Fund Denmark (IFDK). At IFDK, you join a mission-driven organisation with a clear purpose — to finance projects that bring sustainable development to life, from forestry in Paraguay to solar energy in Brazil and diagnostics in Bangladesh. Here is what you get with us: A hands-on role supporting and improving our day-to-day information security practices Collaboration with highly skilled IT professionals in a friendly and inclusive culture Access to the full suite of Microsoft enterprise tools in a modern and tech-driven environment The job We are continuing to strengthen how information security is embedded in our daily work, tools and processes. As part of our Technology & Operations team, you will support the practical implementation and daily operation of our information security efforts. You will work closely with the Technology team and colleagues across the organisation to ensure that security controls, processes, awareness activities and follow-up routines are clear, relevant and used in practice. You will contribute to a modern security environment and help us maintain a strong security posture in a pragmatic, structured and service-minded way. The role combines technical insight, operational follow-up and communication with colleagues, making it ideal for someone who wants to work close to the technology and help turn security requirements into everyday practice. Main tasks and responsibilities Security operations and controls : Design and support the implementation, monitoring and continuous improvement of security controls across the enterprise e.g. via our Microsoft 365 environment, including Entra ID, Defender and Purview. This also includes co-owning the roadmap of technical implementations and future features analysis within the Microsoft 365 eco-system. Risk, documentation and follow-up : Contribute to risk assessments, documentation and follow-up on security requirements, incidents, vulnerabilities and improvement actions. Incident response and monitoring : Support detection, response and follow-up on security events, alerts and incidents, helping ensure that issues are handled in a structured and timely way. Awareness and guidance : Help colleagues understand and apply good security practices through practical guidance, communication and awareness activities. Third party vendor assessment : Contribute to the assessment of both new and existing vendors. Threats and vulnerabilities: Perform proactive threat hunting across Microsoft Defender and related security platforms to identify suspicious activity and emerging threats. Own and coordinate the vulnerability management process, including identification, prioritisation, remediation tracking and reporting. Identity and Access Management (IAM): Own and develop security capabilities related to identity, authentication and access management. This includes identity lifecycle processes, joiner-mover-leaver controls, access reviews, role-based access control (RBAC), privileged access management (PAM), multi-factor authentication, conditional access, and continuous improvement of identity-related security controls across the enterprise. Your qualifications and experience Relevant education within Information Security, Cyber Security, Information Technology or a related field. Security certifications and Microsoft security training are considered an advantage but are not required. Experience from a role where you have contributed to information security initiatives, implementation of controls, risk assessments or security operations — preferably in a regulated environment or the financial sector. Familiarity with relevant security frameworks and requirements, such as ISO 27001/2, DORA or similar. Experience with security documentation, reporting, incident follow-up or control monitoring. Technical understanding of the Microsoft 365 security stack, including Entra ID, Defender, Purview, security monitoring and incident response. Actively keeps up to date with the changing threat landscape and new security technologies. Personal competences Structured, detail-oriented and able to follow tasks through to completion Practical problem-solver with a service-minded approach Ability to communicate clearly with both technical colleagues and business users Curious, collaborative and motivated to learn and improve Has a genuine interest in evolving cyber threats, attack techniques and defensive technologies. Ready to build the digital foundation for global impact? Joining us means becoming part of a warm, ambitious, and genuinely collaborative Technology & Operations Team – driven by the wish to make a real impact. We are a group that thrives on shared purpose, celebrates each other's wins, and is not afraid to roll up our sleeves when things get complex. Our work spans a broad range of initiatives that shape the organisation's digital backbone — but what truly defines us is how we do it: together. You will be working in our Copenhagen office, where you will be surrounded by talented colleagues who bring curiosity, professionalism, and a healthy sense of humour to the table. As we continue to grow and evolve, we are building a culture where learning is continuous and where you will have the space to influence how we work. Send your application today As part of the recruitment process, we need your targeted CV, preferably with a brief motivational statement at the top. Please submit it via the apply button today or no later than October 28th, 2026. We will be conducting interviews on an ongoing basis, so do not wait too long to apply. CVs not submitted via the apply button will not be considered. The start date is as soon as possible, but we are ready to wait for the right candidate. We look forward to hearing from you!