Expert IT Security Specialist

Group Technology at Nordea focuses on engineering solutions and overseeing the bank's technological transformation to support the Customer Vision and Business Strategy. Nordea is a tech employer in the banking industry aiming to evolve finance securely and responsibly, impacting millions of people daily. The Cloud Security team, part of Cyber Security, serves as the primary advisory body for Nordea teams implementing cloud solutions, ensuring security integration from initial planning stages.

• 5+ years of experience in IT security, compliance, and risk management focused on cloud-native environments.
• Strong understanding of Cloud Provider security best practices for AWS, Azure, and GCP.
• Proven experience in risk leadership coordinating with legal, procurement, and technical teams.
• Familiarity with AI security threats, governance frameworks, and security implications of Large Language Models (LLMs) or AI integrations.
• Ability to translate technical risks into business-friendly language for non-technical stakeholders.

Nice to have:

• Security certifications from AWS, Azure, or GCP, preferably GCP.
• Experience with deployment or governance of cloud CNAPP tools such as Wiz.

• Provide expert guidance on security controls for SaaS, PaaS, and IaaS aligning with industry frameworks and compliance.
• Participate in Third Party Risk Assessments (TPRM) and Quality Risk Assessments (QRA).
• Act as central coordinator for AI Security, assessing security implications of AI implementations.
• Serve as strategic liaison between Cyber Security organization and project teams.
• Review architectural designs to promote "security by design".
• Monitor and approve security changes in Nordea's main cloud providers to maintain security posture and risk management.

In accordance with Regulation (EU) 2016/679 (GDPR), applicants must include consent for processing personal data for recruitment purposes. Personal data administrator is Nordea Bank Abp, Poland branch. Providing personal data is mandatory for recruitment. Applicants have rights to access, rectify, and delete their data. Requests for data deletion terminate recruitment participation. Responses will be sent only to selected candidates.