Head of Security Incident Response and Threat Management

Danske Bank; København; Hybrid; DKK 897,000 - 1,345,000; Full time

Benefits offered by this job

Growth opportunities

Health & Well-being

Hybrid work conditions

Additional leave days

Insurance & pension

Job summary

Danske Bank is seeking a Security Incident Response Leader to guide a technically strong team protecting critical services across the Nordic region. You will lead investigations, refine playbooks, and coordinate threat intelligence while coordinating with risk stakeholders in a hybrid, collaborative environment.

You will manage incident response programs, ensure regulatory compliance, and mentor staff as part of a dynamic security function.

Qualifications

• Minimum 6 years in cyber security operations.
• At least 4 years in daily threat monitoring and response.
• Minimum 2 years people management or team leadership.
• Strong understanding of enterprise technologies and security controls.
• Ability to communicate clearly with technical and senior stakeholders.
• Knowledge of IT risks, controls, and European financial regulations.
• Industry certifications such as CISSP, GCIA, GCIH, OSCP, or equivalent.
• Master's degree in cyber security or related field.

Responsibilities

• Lead and develop a technically skilled incident response and threat management team.
• Play a central role in major incident management, leading investigations and making decisions in line with policy, legal requirements and tested processes.
• Provide timely briefings to the Chief Security Officer on the status of technical controls, response capabilities and major investigations within your area.
• Design and refine incident response processes, runbooks, and playbooks.
• Oversee digital forensics to ensure investigations are legally defensible.
• Support compliance activities including regulatory requests and audits.
• Monitor key performance indicators for detection and containment times.
• Foster team growth through mentoring and knowledge sharing.
• Coordinate threat intelligence to support tactical and strategic functions.

Skills

Incident response

Threat monitoring

Stakeholder comms

Security controls

Enterprise tech knowledge

Risk & compliance

Education

Master's degree in cyber security

Tools

SIEM platforms

Forensics tools

Cloud security

Job description

Job Description

Join our Security Incident Response and Threat Management Team and take the lead in protecting Danske Bank's critical services across the Nordic region. You will guide a technically strong team through complex threat landscapes while ensuring our customers receive secure, resilient banking services. This role offers the opportunity to shape incident response capabilities in a rapidly evolving digital environment.

What You Will Be Doing

As our Security Incident Response Leader, you will lead a team that safeguards banking operations for millions of customers while adapting to cloud and advanced technologies. You will collaborate with technology, business, and risk stakeholders to maintain robust security across the Group.

• Lead and develop a technically skilled incident response and threat management team
• Play a central role in major incident management, leading investigations and making decisions in line with policy, legal requirements and tested processes
• Provide timely briefings to the Chief Security Officer on the status of technical controls, response capabilities and major investigations within your area
• Design and refine incident response processes, runbooks, and playbooks
• Oversee digital forensics to ensure investigations are legally defensible
• Support compliance activities including regulatory requests and audits
• Monitor key performance indicators for detection and containment times
• Foster team growth through mentoring and knowledge sharing
• Coordinate threat intelligence to support tactical and strategic functions

About You

• Minimum 6 years professional experience in cyber security operations
• At least 4 years in daily threat monitoring and response activities
• Minimum 2 years people management or team leadership experience
• Strong understanding of enterprise technologies and security controls
• Ability to communicate clearly with technical and senior stakeholders
• Knowledge of IT risks, controls, and European financial regulations
• Industry certifications such as CISSP, GCIA, GCIH, OSCP, or equivalent
• Experience in financial services or regulated environments would be valuable, along with a master's degree in cyber security, computer science, or related field.

What We Offer You

This position can be located both in Lithuania and Denmark. If the position is located in Lithuania the monthly salary range will be from 7040 EUR to 10560 EUR gross (based on your competencies relevant for the job). Additionally, each Danske Bank employee receives employee benefits package (benefits are only valid for Lithuania the same as the salary ranges) which includes:

• Growth opportunities: professional & supportive team, e-learnings, numerous development programs; (incl. professional certificates); 100+ professions for internal mobility opportunities.
• Health & Well-being: a diverse, inclusive, work & life balance work environment; additional health insurance; mental well-being practices; partial psychologist counselling compensation; silence and sleep zones at the office; game rooms.
• Hybrid working conditions: Work from home up to two days a week; home office budget (after the probation period); modern Danske Campus workplace developed with anthropologist for the best employee experience.
• Additional days of leave: for rest, health, volunteering, exams in higher education institutions, and other important activities. Moreover, for seniority with Danske Bank.
• Monetary compensation package: accidents & critical diseases insurance; financial support in case of unfortunate events, travel insurance; IIIrd Pillar Pension Fund contribution.

Your job function (position) in the job contract will be Cyber Security.

We provide a collaborative environment where you can develop cutting-edge security capabilities while leading a talented team. You will work in a hybrid model with 3 to 4 days per week in the office to promote knowledge sharing and team collaboration. We support your professional growth through continuous learning opportunities and career progression within our expanding security function.

About Us

Danske Bank is a Nordic bank with bridges to the world around us. For 150 years, we have supported people and businesses in releasing their potential. A career with us is an opportunity to join a community of 22,000 colleagues in a culture where we are committed to Teaming Up, Owning It and Being Open. Together, we are on a journey to transform Danske Bank into a better bank. For our customers, our employees and the societies around us.