About this opportunity

• Build upon the development of the risk landscape, regulatory changes, the business strategy, the risk appetite, internal, external and regulatory findings, results from benchmarking assessments (such as the PwC NIST assessment) and considers the ongoing implementation of earlier security objectives (such as GISP);

• Improve transparency on cyber risks and maturity of Nordea’s cyber defence capabilities. Build up on international standards and best practices where possible;
• Further improve Nordea’s cyber defence capabilities to drive the risk of Organised Crime Advanced Persistence Threat below “Critical”; and
• Keep Nordea compliant with regulatory requirements.

• Provide oversight of first line security posture
• Challenge and proactively advice the first line on security processes, regulatory compliance, and control appropriateness
• Define and demonstrate prudent application and infrastructure security oversight
• Define, monitor and measure security controls embedded in our SDLC (Software Development Life Cycle)

Who you are

• Possess the capability of transforming IT security and the regulatory requirements into operational processes, and ensure the implementation of IT security controls  
• Have a sound, competent and fine-tuned security risk judgement and ability to bridge the technical with the regulatory requirements
• Have a passion/interest for tech security combined with understanding of regulatory requirements
• Hold integrity and trust as your core values and have excellent collaboration and stakeholder management skills
• Demonstrate structured thinking and be comfortable working with complex assignments 
• Are proactive, independent, pragmatic and solution oriented
• Strong presentation skills and the ability to produce management oversight and reporting

• Proven track record within technology security
• Have a background within IT compliance or security, with solid experience of infrastructure processes and regulatory compliance
• You have superior English spoken and written skills, and the following qualifications are well regarded
  • Relevant Bachelor or Master Degree in a technical subject
  • Relevant security qualifications such as CRISC, CISM, CISSP 

Next steps