Information Security Officer @ Orange

Publication date : Nov 09, 2026, 2:32PM

Lead PCI DSS and security governance at Orange Business Nordics, improving compliance, audit readiness, and resilience with a collaborative team. The team, position & mission:

The Compliance team enables Orange Business to protect its information assets, meet regulatory and contractual obligations, and maintain the trust of customers, partners, and stakeholders. We establish and oversee the governance, risk management, and compliance frameworks that support secure, resilient, and reliable business operations. Working closely with business, technology, and operational teams, we ensure that information security is embedded into processes, services, and decision-making. Through risk management, security governance, assurance activities, policy management, and continuous improvement, we help Orange Business manage information security and operational risks, strengthen resilience, and maintain compliance with industry standards and customer expectations.

You will work in the Compliance team, where you are responsible for driving Information Security Governance across Orange Business Nordics. Together with the Compliance team, you will ensure that our Information Security Management System (ISMS), security controls, and compliance activities are aligned with regulatory requirements, customer expectations, and industry standards such as ISO 27001 and PCI DSS.

You will be responsible for maintaining and continuously improving our security governance framework, policies, control follow-up, audit readiness, and certification activities. We also expect you to contribute to the evolution of our security governance model, helping to improve efficiency, automation, and the use of modern Governance, Risk and Compliance (GRC) tools.

Information Security touches every part of the business, from customer deliveries and supplier management to operations, sales, and corporate functions. As such, we expect you to be comfortable working independently, taking ownership, and driving initiatives from planning through execution. As Information Security Officer, you will lead the day-to-day governance activities and provide advice and support on information security matters across the organisation. You will work closely with internal stakeholders, suppliers, auditors, and certification bodies to strengthen security, compliance, and operational resilience.

The position involves extensive collaboration across Orange Business and requires strong communication skills, stakeholder management capabilities, and a pragmatic, risk-based approach to information security.

Your key areas of responsibility as Information Security Officer:

• Own and coordinate the PCI DSS compliance programme, ensuring requirements are implemented, maintained, documented, and continuously monitored across Orange Business Nordics.
• Lead day-to-day information security governance activities, with a strong focus on PCI DSS, ISO 27001, security controls, and audit readiness.
• Ensure security policies, standards, and control frameworks remain aligned with regulatory, contractual, and customer requirements.
• Represent information security and PCI DSS requirements in governance, compliance, risk management, and business initiatives.
• Drive continuous improvement of the Information Security Management System (ISMS), PCI DSS controls, and Governance, Risk & Compliance (GRC) processes to improve efficiency, automation, and compliance maturity.

Why Orange Business?

• Lead and develop the PCI DSS compliance programme for Orange Business Nordics.
• Work with modern security, governance, and compliance platforms focused on automation and continuous improvement.
• Join a collaborative Nordic and European security and compliance team.
• Build expertise in PCI DSS, ISO 27001, customer assurance, audits, and security governance.
• Play a key role in strengthening trust and enabling secure business growth.

As an ideal candidate you have

• 3+ years of experience in Information Security, Security Governance, or Compliance.
• Practical experience with ISO 27001 and Information Security Management Systems (ISMS).
• Experience with PCI DSS compliance, audits, controls, and remediation activities.
• Understanding of relevant regulations and frameworks such as NIS2, DORA, and GDPR.
• Fluent in English, both written and spoken.

What we offer you

• Hybrid ways of working with access to our modern & collaborative office in Oslo
• We may work with tomorrow’s technology, but at our core we are a people-oriented organization
• An open and inclusive culture, that enables us to reach our full potential
• A community of experts - as Digital Natives, we put innovation at the heart of our expertise
• Read more about the benefits we offer here

About Orange Business

Orange Business is a leading network and digital integrator company with 30 000 experts located in offices in 65 countries worldwide, and part of the Orange Group.

We combine our history as a telco operator with the rigor of a network and connectivity expert and the agility of a global digital solutions integrator. Our joint mission is to help innovate, drive and lead them in their digital transformation challenges and business strategies in key digital domains, including Cloud, Customer Experience, and Data & AI. As an agile and fast-moving digital business partner, the business line offers trusted end-to-end solutions and products that help businesses in a wide range of industries in the private and public sector transform their operations, enhance customer experience, and drive growth.

With our digital expertise, we are a strategic partner of Orange Business objectives to be a leading network and digital integrator with our team as a key growth engine.

The process

We screen applications on an ongoing basis, with the aim of conducting conversations and interviews as we receive them.

Interested but feel that you don't match the criteria 100%? We encourage you to apply anyway! We believe in the potential of diverse skill sets, perspectives and individuality. We want to encourage everyone to be their authentic selves and your unique capabilities may align perfectly with our team's needs! Your perfect match might be the next job we are announcing, so why not have a head start and apply now!

Are you interested to read more about Orange Business? Visit our Website or follow ourLinkedInaccount.

At Orange, only your skills matter.

Regardless of your age, gender, background, origin, religion, sexual orientation, disability, neurodiversity, or appearance, we actively encourage diversity within our teams, as it is a collective strength and a driver of innovation. Orange is a disability-inclusive employer: please feel free to let us know about any specific needs you may have.