Expert IT Security Specialist

Nordea Bank Norge ASA; Warszawa, Gdańsk, Łódź; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid working model

Job summary

Nordea Bank Abp in Warsaw seeks a Cloud Security Expert to join the Cyber Security team. You will translate security requirements for cloud, AI, and applications, guiding risk assessments and alignment with industry standards.

The role emphasizes security-by-design, collaboration with legal, procurement, and technical teams, and ongoing protection of Nordea's cloud posture in a hybrid work environment.

Qualifications

• 5+ years in IT security, cloud-native environments.
• Security governance, risk management, and compliance focus.
• Ability to translate security risks to business terms.

Responsibilities

• Provide guidance on security controls across SaaS, PaaS, IaaS.
• Lead Third Party Risk Assessments and Quality Risk Assessments.
• Coordinate AI security use cases and assess AI security implications.
• Act as liaison between Cyber Security and project teams.
• Review designs and promote security by design.
• Monitor changes in cloud providers and maintain secure posture.

Skills

Cloud security

Risk management

Security governance

AI security

Stakeholder communication

Education

CCSP

AWS/Azure/GCP Security Certification

Tools

AWS

Azure

GCP

CNAPP tooling (e.g., Wiz)

Job description

Select how often (in days) to receive an alert: Create Alert

Job ID:4208

Welcome to Group Technology, where we pride ourselves on engineering solutions and direct Nordea’s transformation by providing a holistic technological view and structured understanding of the bank, and its surrounding environment to enable the Customer Vision and the Business Strategy.

Nordea is a place where traditions meet tomorrow. We're not just a bank, we'rea tech employer on a mission to evolve finance securely and responsibly. Together, we impact millions of people’s daily lives by ensuring they can access our solutions anytime, anywhere, while safeguarding their personal data and wealth. Join us in making an impact on the banking industry.

About our team

Meet the Cloud Security team. As a part of Cyber Security we act as the primary advisory body for Nordea teams implementing cloud solutions, ensuring security is built-in from the initial planning phases.

What you'll be doing

We are now looking for a Cloud Security Expert specialist to join our team and help us stay up to date with everchanging world of risks, security and compliance requirements in cloud and AI. Person who understands security best practices for applications, servers and networks and can translate that into Cloud security requirements and standards.

Main responsibilities in this role:

• Provide expert guidance on selecting security controls across SaaS, PaaS, and IaaS models, ensuring alignment with industry frameworks and internal compliance.
• Participate in Third Party Risk Assessments (TPRM) and Quality Risk Assessments (QRA) to provide senior leadership with a comprehensive risk picture.
• Act as a central coordinator for AI Security, synthesizing use cases and assessing the security implications of emerging AI implementations.
• Function as a strategic liaison between Cyber Security org. and project teams, translating complex technical requirements into business-aligned security strategies.
• Review architectural designs and recommend enhancements to ensure "security by design" rather than "bolted-on" solutions.
• Monitor and approve security changes in Nordea main cloud providers, to ensure Nordea security posture isn’t weakened and risks are properly captured and approved.

Who you are

This is the right role for you if you have:

• 5+ years’ experience in IT security, compliance, and risk management with a focus on cloud-native environments.
• Strong understanding of Cloud Provider security best practices (AWS, Azure, or GCP) and how to apply them to diverse business projects.
• Proven experience in risk leadership, specifically coordinating with legal, procurement, and technical teams during risk evaluation evaluations.
• Familiarity with AI security threats, governance frameworks, and the security implications of Large Language Models (LLMs) or AI integrations.
• Ability to translate technical risks into "business-friendly" language for non-technical stakeholders.

Nice to have certifications:

Preferably AWS/Azure/GCP Security, CCSP

It would be ideal if you also:

• Have security or architecture certification from one (or more)of three main cloud providers AWS/Azure/GCP. For this role GCP is preferable.
• Have an experience in deployment or governance of cloud CNAPP tool e.g. Wiz

What we offer

Collaboration. Ownership. Passion. Courage. These are the values that guide us in how we work and how we make decisions – and that we imagine you share with us.

People are driven by many different factors. For some, it’s to take their career to the next level. For others, it’s to break new ground within their area of expertise – in other words, with us, you will always move forward.

A culture that fosters performance and growth in one of the largest Nordic banks, offering various opportunities to evolve, develop and learn from brilliant colleagues with diverse backgrounds in a vibrant working environment.

Hybrid working model – we believe in the value of bringing people together and at the same time we embrace the freedom of flexibility.

Diversity and inclusion are a natural part of our daily work. We know that an inclusive workplace is a sustainable one. We genuinely believe that our diverse backgrounds, experiences, characteristics and traits make us stronger together. Every day we stride to find new ways to improve diversity and inclusion within our community e.g. we have signed the European Diversity Charters in the countries where we operate to show our commitment and engage with others to continue learning and improving.

If this sounds like you, get in touch!

Please include permit for processing personal data in CV as following:

In accordance with art. 6 (1) a and b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter ‘GDPR’. I agree to have: my personal data, education and employment history proceeded for the purposes of current and future recruitment processes in Nordea Bank Abp.

The administrator of your personal data is: Nordea Bank Abp operating in Poland through its Branch, address: Aleja Edwarda Rydza Śmiglego 20, 93-281 Łodź. Your personal data will be processed for the recruitment processes in Nordea Bank Abp. You have a right to access your personal data, right to rectify and right to delete. Disclosing the personal data in the scope specified by the provisions of Polish Labour Code from 26 June 1974 and executive acts are mandatory. Providing personal data is necessary to conduct the recruitment processes. The request for the deletion of your personal data means resignation from further participation in recruitment processes and causes the immediate removal of your application. Detailed information concerning processing of your personal data can be found at: nordea.com/en/doc/nordea-privacy-policy-for-applicants.pdf.

We reserve the right to reply only to selected applications.