Statkraft is a leading company in hydropower internationally and Europe’s largest generator of renewable energy. The Group produces power out of hydro, wind, solar, gas-fire and supplies district heating. Statkraft is a global company in energy market operations and has over 3600 employees in 16 countries. Statkraft IT is the Statkraft Group’s IT service provider and Digitalization Centre of Expertise, delivering a full set of services from business development, change management, projects, application development to operational services.

IT Governance, Risk and Compliance is a key function that is based on the principle One Company Approach for the entire Statkraft Group. To strengthen the capability, both with regards to competence and capacity, a role as Senior IT Risk Manager is established. The position will function across departments and geographies, which opens for a diverse work environment. 
 

The person will work closely with the IT GRC Lead and other roles in the domain which cover Governance and Compliance aspects in addition to Risk Management. The role will be part of a newly established Cyber Security Department within Markets & IT. The Cyber Security Department seeks those who are passionate about their work and thrive in dynamic and complex environments. You always seek best practice and are able to communicate with diverse stakeholders.

 

Your role:

• IT Risk Management focal point
• Facilitation and coordination of resources in risk assessment activities
• Perform risk analysis in line with corporate policies and defined methodology
• Assess information and technology risks related to business processes and supporting IT systems
• Communicate and promote the organization’s IT risk management process and outcome
• Collaborate with Corporate- and Business Area Risk Management functions
• Develop and implement risk policies and guidelines
• Continual improvement of Risk Management practices

 

Your profile:

• Understand and apply the principles of risk management for analysing applications and infrastructure
• Utilize good practices and standards in risk analysis
• Knowledge about architecture frameworks and methodologies
• Aware of emerging technologies – PaaS, SaaS, IaaS, etc
• Aware of relevant sources for best practice the risk management domain
• Knowledge of standards and best practices such as ISO31000, ISO27000, IRAM2, COBIT, ITIL

 

Further, we believe that the right candidate can relate to the following:

• Excellent communicator with good risk management knowledge and personal hands-on experience in conducting risk assessment in global and multicultural environment.
• Good technical understanding of Information Security related to platforms, applications, infrastructure.
• Fluent in Norwegian and English, both oral and written.
• Eligible for Norwegian Secret security clearance and authorization.

 

Statkraft manages critical infrastructure and services in several countries. We conduct background checks on qualified applicants before hire.

 

Statkraft offers:

Professional and personal development in an exciting company in a newly established Cyber Security Department

A positive working environment characterized by competence, responsibility and innovation

A diverse workplace with regards to gender, age and cultural background

Competitive terms of employment and excellent benefit schemes