Norwegian

Lysaker

"Our people are the heart of Norwegian. 
We embrace a culture of diversity, equality and inclusion. 
Embracing this culture is critical to our business success and makes us stronger together. 
Our people have different knowledge, experiences, and backgrounds, 
but all share a passion for our vision; to become the most loved and trusted airline in Europe”.
Are you our new IT Risk Manager?
Do you thrive where governance, collaboration, and precision meet real-world impact? Aviation offers some of the most exciting challenges in technology---where resilient and compliant digital services are essential for safety, efficiency, and the customer experience. At Norwegian, you’ll be part of that journey.
As our new IT Risk Manager, you will lead and evolve risk management across IT and operations, working closely with the CIO, CISO, the Part-IS Common Responsible Person, and the Incident Response/Cybersecurity Operations Manager. You’ll identify, mitigate, and monitor risks to security, business continuity, and compliance (NIS2, Part-IS) and help protect the services used by millions of travellers.
Key Responsibilities:
<ul><li>
Establish, implement, and maintain the Risk Management Framework aligned to ISO 27005/27001 and ISO 31000---integrating IT, operational, and compliance risks into a single cohesive model and updating it to reflect emerging threats and regulatory changes.
</li><li>
Risk identification and assessment: run organisation-wide risk assessments across IT systems, operational processes, and third-party/supply-chain dependencies; maintain a detailed risk register with severity/likelihood ratings.
</li><li>
Risk mitigation and response: partner with stakeholders to design targeted mitigation plans; track control effectiveness and regulatory coverage; provide risk-based input to incident containment and recovery.
</li><li>
Governance and oversight: embed risk management into broader governance; define metrics/KPIs and report regularly to senior leadership; brief the Accountable Manager and Part-IS Common Responsible Person on potential IT-related flight-safety risks.
</li><li>
Regulatory compliance: ensure alignment with applicable mandates (e.g., NIS2, Part-IS); maintain audit-ready documentation and support regulator interactions.
</li><li>
Cross-functional collaboration: work with Compliance, IT, Operations, and Procurement to address cybersecurity, data protection, operational continuity, and supply-chain risks; provide risk input to strategic projects and major changes.
</li><li>
Training and awareness: in partnership with HR/Training, design and deliver training that elevates risk maturity; promote a risk-aware and safety-first culture across the organisation.
</li></ul>
Your Background and Expertise:
<ul><li>
Bachelor’s or master’s degree in risk management, Business Administration, Cybersecurity, or a related field.
</li><li>
5--7+ years of experience in enterprise and/or IT risk management, preferably within regulated industries (e.g., aviation, energy, or critical infrastructure).
</li><li>
Strong understanding of NIS2 , Part-IS , and risk standards such as ISO 27005/27001 and ISO 31000.
</li><li>
Proven experience conducting/documenting risk assessments, maintaining risk registers, and driving mitigation plans to closure.
</li><li>
Excellent communication and reporting skills---able to translate complex risk into clear insights for senior leadership.
</li><li>
Proficiency with risk management tools and dashboards; familiarity with control frameworks and audit practices.
</li><li>
Strong analytical capability spanning technical and operational domains; experience orchestrating cross-functional initiatives.
</li></ul>
Characteristics and Personality:
<ul><li>
Structured, proactive, and outcome oriented.
</li><li>
Confident facilitator who builds trust across IT, operations, and leadership.
</li><li>
Analytical and pragmatic---balances compliance needs with operational realities.
</li><li>
Continuous-improvement mindset with a passion for measurable risk reduction.
</li></ul>
We can offer:
Joining Norwegian means more than just a competitive salary --- it’s about being part of a community that values and rewards your contributions.
Here’s what you can look forward to:
<ul><li>
Travel benefits across Europe and beyond with discounted employee fares on Norwegian and partner airlines
</li><li>
Attractive pension schemes
</li><li>
Comprehensive medical and travel insurance
</li><li>
Hybrid work flexibility -- combine working from home and the office
</li><li>
Competitive salary and development opportunities
</li><li>
Access to Norwegian SportsClub activities
</li><li>
Option to join our share saving plan
</li></ul>
We aim to reward, support, and develop our people to help them thrive in their careers.
Could this be the start of an amazing journey? If you love the thought of working with us, click the Apply Now button to complete your application. You will need to upload a recent copy of your CV.
Please note: We can only accept applications that have been submitted through our recruitment system. We will accept your CV in either English or a Scandinavian language.
***“We care for each other, our customers and our environment as we navigate the skies
<li>the Norwegian way”***</li>