Business Risk Manager - Data Privacy

Nordea; Łódź; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Hybrid working model

Diversity and inclusion

Job summary

Nordea is seeking a Business Risk Manager to join its Data Privacy Centre of Excellence in Group Business Support, based in Poland. You will deliver operational privacy processes, support stakeholders, and strengthen privacy controls across the bank's functions in a regulated environment.

You will assess privacy risks, prepare reports, and help teams apply privacy requirements while developing expertise in data protection and risk management within a large Nordic financial group.

Qualifications

• University degree in a related field such as law, business, risk management, compliance, finance, or information management.
• Experience in professional environments focusing on risk, compliance, or data protection.
• Knowledge of data protection laws and ability to apply it to business contexts.
• Strong written and verbal English communication.
• Ability to collaborate with colleagues across locations.

Responsibilities

• Deliver operational privacy processes and risk assessments across business areas.
• Support stakeholders in applying privacy requirements daily.
• Identify privacy risks and support actions to reduce them.
• Develop and improve privacy processes and controls.
• Prepare reports and management information on privacy activities.
• Support privacy-related aspects of cross-organisational initiatives.
• Build relationships with stakeholders across countries.

Skills

Privacy risk management

Stakeholder engagement

English proficiency

Structured thinking

Regulatory knowledge

Education

Bachelor's degree in law/finance/compliance

Tools

Mega HOPEX

Job description

We are looking for Business Risk Managers to join Nordea’s Data Privacy Centre of Excellence in Group Business Support. These are permanent, full-time positions, based in Poland, offering the opportunity to work on practical data privacy risk management across one of the largest financial services organisations in the Nordics. This is an opportunity to join a collaborative, international team where you will gain exposure to a wide range of business areas, work with experienced privacy and risk professionals, and develop expertise in data privacy, risk management, and operational delivery in a highly regulated environment.

About Our Team

Meet the Data Privacy Centre of Excellence in Group Business Support team. Our role is to help Nordea handle personal data responsibly and in line with legal and regulatory requirements. Our team support colleagues across the bank by providing practical privacy advice, delivering key privacy processes, and helping reduce risks linked to the use and protection of personal data.

Collaboration. Ownership. Passion. Courage. These are the values that guide us in how we work and how we make decisions – and that we imagine you share with us.

What You’ll Be Doing

As the Business Risk Manager, you will help Nordea manage privacy risks and meet its data protection obligations by delivering operational privacy processes, supporting stakeholders across the bank, and contributing to the continuous improvement of privacy controls and ways of working.

Main responsibilities in this role:

• Executing operational privacy processes and services, including risk assessments, records of processing, lawful basis assessments, transfer impact assessments, retention period assessments, and other privacy activities that support regulatory compliance across business areas and group functions.
• Supporting colleagues in understanding privacy requirements and applying them in day-to-day business activities.
• Identifying potential privacy risks, assessing their impact, and supporting actions to reduce or manage them.
• Contributing to the development and improvement of privacy processes and controls.
• Preparing reports, presentations, and management information related to privacy activities as needed.
• Supporting privacy-related aspects of projects and initiatives across the organisation.
• Building relationships with stakeholders across different business areas and countries.
• Contributing to privacy awareness activities that help colleagues understand their responsibilities and adopt good privacy practices.

This role offers a broad view of how a large international bank manages privacy risk and protects customer and employee information.

Who You Are

You are a motivated professional who enjoys solving problems, working with stakeholders, and applying structured thinking to practical risk and privacy challenges.

This is the right role for you if you:

• Are organised and able to manage multiple tasks and priorities.
• Take initiative and enjoy working independently as well as part of a team.
• Have good communication skills and be comfortable engaging with different stakeholders.
• Enjoy analysing information and presenting clear recommendations.
• Are willing to learn and develop your knowledge of privacy, risk, and regulatory topics.

Your background and skills include:

• A university degree in law, business, risk management, compliance, finance, information management, or a related field.
• Some experience working in a professional environment, for example within risk, compliance, legal, operations, consulting, audit, governance, or data protection.
• Knowledge of data protection and privacy laws, with the ability to apply that knowledge to practical business situations.
• Strong written and verbal communication skills in English.
• The ability to work effectively with colleagues from different backgrounds and locations.

It would be ideal if you also have:

• Experience in business processes, and process mapping.
• Experience in Mega HOPEX.

What We Offer

People come here when they want to get somewhere. For some, it’s to take their career to the next level. For others, it’s to break new ground within their area of expertise – in other words, with us, you will always move forward.

A culture that fosters performance and growth in one of the largest Nordic banks, offering various opportunities to evolve, develop and learn from brilliant colleagues with diverse backgrounds in a vibrant working environment.

Hybrid working model – we believe in the value of bringing people together and at the same time we embrace the freedom of flexibility.

Diversity and inclusion are a natural part of our daily work. We know that an inclusive workplace is a sustainable one. We genuinely believe that our diverse backgrounds, experiences, characteristics and traits make us stronger together. Every day we strive to find new ways to improve diversity and inclusion within our community e.g. we have signed the European Diversity Charters in the countries where we operate to show our commitment and engage with others to continue learning and improving.

We enable dreams and aspirations for a greater good.

We build relationships.

We learn and develop.

We lead change.

We are Nordea.

We have a 200-year history of supporting and growing the Nordic economies and our values are deeply rooted in these open, progressive and collaborative societies. As one of the biggest employers in the Nordics, Poland and Estonia, you have excellent opportunities to evolve, develop and move forward with us.

Please include permit for processing personal data in CV as following:

In accordance with art. 6 (1) a and b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter ‘GDPR’. I agree to have: my personal data, education and employment history proceeded for the purposes of current and future recruitment processes in Nordea Bank Abp.

The administrator of your personal data is: Nordea Bank Abp operating in Poland through its Branch, address: Aleja Edwarda Rydza Śmiglego 20, 93-281 Łodź. Your personal data will be processed for the recruitment processes in Nordea Bank Abp. You have a right to access your personal data, right to rectify and right to delete. Disclosing the personal data in the scope specified by the provisions of Polish Labour Code from 26 June 1974 and executive acts are mandatory. Providing personal data is necessary to conduct the recruitment processes. The request for the deletion of your personal data means resignation from further participation in recruitment processes and causes the immediate removal of your application. Detailed information concerning processing of your personal data can be found at: https://www.nordea.com/en/doc/nordea-privacy-policy-for-applicants.pdf

We reserve the right to reply only to selected applications.