Welcome to Group Technology, where we pride ourselves on engineering solutions and direct Nordea's transformation by providing a holistic technological view and structured understanding of the bank, and its surrounding environment to enable the Customer Vision and the Business Strategy.
Nordea is a place where traditions meet tomorrow. We're not just a bank, we're a tech employer on a mission to evolve finance securely and responsibly. Together, we impact millions of people's daily lives by ensuring they can access our solutions anytime, anywhere, while safeguarding their personal data and wealth. Join us in making an impact on the banking industry.
About our team
Meet the Cloud Security team. As a part of Cyber Security we act as the primary advisory body for Nordea teams implementing cloud solutions, ensuring security is built-in from the initial planning phases.
What you'll be doing
We are now looking for a Cloud Security Expert specialist to join our team and help us stay up to date with everchanging world of risks, security and compliance requirements in cloud and AI. Person who understands security best practices for applications, servers and networks and can translate that into Cloud security requirements and standards.
Main responsibilities in this role:
* Provide expert guidance on selecting security controls across SaaS, PaaS, and IaaS models, ensuring alignment with industry frameworks and internal compliance.
* Participate in Third Party Risk Assessments (TPRM) and Quality Risk Assessments (QRA) to provide senior leadership with a comprehensive risk picture.
* Act as a central coordinator for AI Security, synthesizing use cases and assessing the security implications of emerging AI implementations.
* Function as a strategic liaison between Cyber Security org. and project teams, translating complex technical requirements into business-aligned security strategies.
* Review architectural designs and recommend enhancements to ensure "security by design" rather than "bolted-on" solutions.
* Monitor and approve security changes in Nordea main cloud providers, to ensure Nordea security posture isn't weakened and risks are properly captured and approved.
Our requirements
Who you are
This is the right role for you if you have:
* 5+ years' experience in IT security, compliance, and risk management with a focus on cloud-native environments.
* Strong understanding of Cloud Provider security best practices (AWS, Azure, or GCP) and how to apply them to diverse business projects.
* Proven experience in risk leadership, specifically coordinating with legal, procurement, and technical teams during risk evaluation evaluations.
* Familiarity with AI security threats, governance frameworks, and the security implications of Large Language Models (LLMs) or AI integrations.
* Ability to translate technical risks into "business-friendly" language for non-technical stakeholders.
Nice to have certifications: Preferably AWS/Azure/GCP Security, CCSP.
It would be ideal if you also:
* Have security or architecture certification from one (or more)of three main cloud providers AWS/Azure/GCP. For this role GCP is preferable.
* Have an experience in deployment or governance of cloud CNAPP tool e.g. Wiz.
What we offer
Collaboration. Ownership. Passion. Courage. These are the values that guide us in how we work and how we make decisions - and that we imagine you share with us.
People are driven by many different factors. For some, it's to take their career to the next level. For others, it's to break new ground within their area of expertise - in other words, with us, you will always move forward.
A culture that fosters performance and growth in one of the largest Nordic banks, offering various opportunities to evolve, develop and learn from brilliant colleagues with diverse backgrounds in a vibrant working environment.
Hybrid working model - we believe in the value of bringing people together and at the same time we embrace the freedom of flexibility.
Diversity and inclusion are a natural part of our daily work. We know that an inclusive workplace is a sustainable one. We genuinely believe that our diverse backgrounds, experiences, characteristics and traits make us stronger together. Every day we strive to find new ways to improve diversity and inclusion within our community e.g. we have signed the European Diversity Charters in the countries where we operate to show our commitment and engage with others to continue learning and improving.
... team Meet the Cloud Security team. As a part of Cyber Security we act as the primary advisory body for Nordea teams implementing cloud solutions, ensuring security is built-in from the initial planning phases. What you'll be doing We are now looking for a Cloud Security Expert specialist to join our team and help us stay ...
... , About our team, , Welcome to the Threat Modelling capability. We add value by protect & de-risking the bank by using new and innovative capabilities to be fit for the future threat landscape. As the Expert Threat Modelling Specialist, you will take an active part in structured approach of identifying and prioritizing ...
... the finance sector and a popular choice for those with an eye for detail., , Would you like to be the part of fresh and dynamic team? We are now searching for a IT Security Compliance Specialist that will be responsible for ensuring that their organization complies with bank standards by creating security configuration baselines ...
Twój zakres obowiązków - Projektowanie i wdrażanie zabezpieczeń (poczynając od koncepcji do realizacji technicznej) - Projektowanie polityk i procedur bezpieczeństwa IT oraz ich samodzielne wdrażanie technicznie w istniejącej infrastrukturze - Zarządzanie ochroną endpointów w ESET Cloud (AV/XDR) - konfiguracja polityk, ...
... Wazuh, OpenVAS, Microsoft Purview, rozwiązania antywirusowe klasy EDR/XDR, rozwiązania Zero Trust, podstawy administracji urządzeniami sieciowymi (routerami i switchami), narzędzia służące do analizy bezpieczeństwa kodu, podstawy vulnerability management, podstawowe zagadnienia związane z cyberbezpieczeństwem To oferujemy, ...
... networking or cybersecurity certifications. What we offer - employment in an international company; - all necessary tools and equipment for the job; - internal onboarding trainings; - friendly work environment; Koksownicza 11, Dąbrowa Górnicza Silesian contract of employment, contract of mandate, B2B contract full-time expert
... Vault, Microsoft Entra ID, Terraform, Kubernetes, ISO 27001, DORA, NIS2, RODO, IAM, CI/CD Mile widziane, AWS, GCP O projekcie, Szukamy doświadczonego Cloud Security Experta, który chce łączyć projektowanie architektury chmurowej z obszarem bezpieczeństwa. Jeśli masz praktyczne doświadczenie z Microsoft Azure, Microsoft ...
Expert IT Analyst Miejsce pracy: Warszawa Technologies we use Operating system - Windows About the project At Cyclad, we work with top international IT companies to help them deliver cutting-edge technologies that shape the future. We are currently looking for an experienced Expert IT Analyst to join an international team ...
... Professionals to wyspecjalizowana agencja rekrutacyjna i firma outsourcingowa o silnym profilu technologicznym., , Od ponad 10 lat wspieramy firmy w budowie zespołów IT, AI, Cybersecurity, SAP oraz w rekrutacjach dla finansów, inżynierii i marketingu., , Zrealizowaliśmy ponad 1000 skutecznych procesów rekrutacyjnych dla korporacji, ...
... kultury odpowiedzialności za terminową remediację podatności. Nasze wymagania - minimum 3 lata doświadczenia w obszarze cyberbezpieczeństwa lub bezpieczeństwa IT, - praktyczne doświadczenie w obszarze Vulnerability Management, Security Operations lub bezpieczeństwa infrastruktury, - znajomość zagadnień związanych z bezpieczeństwem ...