Job Description

Hydro Global Business Services (GBS) is an organizational area that operates as an internal service provider for the Hydro group. Its ultimate purpose is to deliver relevant IT, financial and HR business services to all business areas within the company.

Role purpose

This position is responsible for Hydro group locations covering the following areas:
• Coordinate and supervise IT Compliance and Resilience related projects and audits (e.g. TISAX) for different Business Areas.
• Coordination of internal control handbook introduction in IS/IT area
• Supervising internal controls in IS/IT area within GBS and BA functions
• Ensure compliance for GBS and BA functions (IT/IS)
• Support communication between ICFR Director, Hydro locations and IS/IT GBS functions
Working closely with various stakeholders, including IT teams, business areas, and business units, to develop and implement comprehensive compliance and resilience strategies that align with the organization's goals and objectives. Additionally, the role supports the organization in achieving IT compliance and resilience objectives, contributing to risk-informed decision-making and business continuity across the enterprise. This role ensures accuracy and competence in internal control to fulfil country specific requirements, corporate policies and rules.

What you will be doing

• Ensure alignment with internal governance frameworks and external regulations (e.g. NIS2, TISAX, ISO) across IT/OT environments
• Support business teams in building and enhancing compliance processes and best practices
• Coordinate and support internal and external audits, ensuring timely resolution of findings
• Monitor compliance status, risks, and remediation activities, and provide clear reporting to stakeholders
• Contribute to the development of GRC and resilience frameworks
• Support business continuity and disaster recovery processes, including testing and improvements
• Act as a trusted partner between business, IT, and cybersecurity teams to ensure effective collaboration
• Drive awareness and provide guidance on IT/OT security and compliance topics

What will make you successful?

• 3 years' experience in IT GRC and resilience related program management
• Knowledge of IS/IT functions, organizational systems, internal control processes and information systems of global corporations and shared services
• Experience at multinational companies with global presence – preferably on security area
• BSc in computer science, cyber security, IT, cybernetics, or related fields.
• Proven experience in IT/OT governance, risk, and compliance.
• Practical understanding of OT environments, including SCADA and ICS, and their integration with IT systems.
• Familiarity with regulatory frameworks and standards (e.g., IEC 62443, CIS).
• Relevant certifications are considered an advantage.
• Knowledge of ServiceNow IRM is desirable.
• Experience with compliance tooling and automation (e.g., GRC platforms such as ServiceNow, Archer, or equivalent).
• Familiarity with risk management methodologies (e.g., risk assessment, control evaluation).

What we offer you

• Working at the world’s only fully integrated aluminum and leading renewable energy company
• Diverse, global teams
• Flexible work environment/home office
• We provide you the freedom to be creative and to learn from experts
• Possibility to grow with the company, gain new certificates
• Attractive benefit package

Equal opportunities

At Hydro, we believe diversity makes us stronger. We welcome diverse experiences and perspectives, and invite all qualified candidates to apply. We review every application fairly and strive to provide equal opportunities for everyone to grow and succeed.

Apply before: 31/05/2026