Senior IT Security Specialist/Application owner within Access Management domain

Job ID: 26961 
 

Have you spent several years within the security and the IAM area? Do you have good understanding of IT roles and processes and experience working in multiple roles during your career. We are looking for a senior person that with his/her experience can manage components of highly available security infrastructure used for authentication of internal identities.

About this opportunity

Access Management is functionality under IAM belonging to the Cyber Security area within Nordea. We provide centralised IAM solutions and standardised IAM services towards Nordea’s workforce and systems. Our ambition is to strengthen the security of the bank and act as single point of contact for all units, acquiring these solutions and services. This is an opportunity for you to be part of an international team, eager to support our mission to secure the Bank, by making it: De-risked, Compliant, Secure & Protected.

Your main responsibility as application owner within our Access Management team, will be to have the overarching accountability for the lifecycle of our applications. This includes ensuring that our applications delivers the required value and outcome to our workforce and to ensure that we stays compliant towards legal and regulatory requirements. Alongside the ownership you will play a crucial role in maturing, developing and integrating Access Management landscape in Nordea. Application capabilities that you will work with includes (but are not limited to): Single Sign On, MFA (Multi Factor Authentication), Identity Federation (SAML, OIDC), Authorization (RBAC, ABAC) and Access Management.

What you’ll be doing

You will be responsible for:

• securing the availability of our 24x7 business critical applications
• applications Lifecycle Roadmap​ and Portfolio Management​
• risk & Quality Assurance
• regulatory compliance
• taking informed and sensible decisions based on stakeholder and experts input

You will:

• support the creation and documentation of processes, use cases, etc.
• work on future Access Management landscape in Nordea - together with stakeholders and management – to align with changing business needs, compliance requirements, security guidelines, standards, polices, etc.
• act as a technical expert and role model
• work closely with your colleges and share knowledge with others

The role is based in modern premises located centrally in Helsinki, Stockholm, Oslo, or in the TriCity area in Poland, with the possibility to work partly from home.

Please, note the candidate should be located in the country of hire already.

Who you are

Collaboration. Ownership. Passion. Courage. These are the values that guide us in being at our best – and that we imagine you share with us.  

To succeed in this role, we believe that you:

• Have a key interest in Cyber Security and supporting technologies
• Are focused on end2end, future proof solutions, following best practices
• Are structured and result-oriented, taking ownership, reaching out and “making things happen”​
• Are a role model for collaboration, empowering own team, inspiring the “Can.do”-attitude​
• Communicate in a clear and understandable way ​​
• Thorough understanding of business strategy, goals and priorities​​
• Have Strong technical competence and documentation skills
• Are Fluent in English (spoken and written)

Your experience and background:

• Several years of proven experience working with IAM solutions  
• Experience with delivering infrastructure services towards high amount of applications
• Knowledge of identity security best practices, for both on-premises and cloud environments
• Knowledge of fundamental security approaches and principles (such as Segregation of Duties, Least Privilege, Zero Trust)
• Previous experience working in a DevOps team in Agile/Scrum setup
• Understanding of IT processes and system development life cycle
• Security certifications are a plus

If this sounds like you, get in touch!

Next steps

Submit your application no later than 25/11/2024. For more information, you’re welcome to contact Head of Access Management, Chatrine Höök at chatrine.hook@nordea.com.

At Nordea, we know that an inclusive workplace is a sustainable workplace. We deeply believe that our diverse backgrounds, experiences, characteristics and traits make us better at serving customers and communities. So please come as you are.

Please be aware that any applications or CVs coming through email or direct messages will not be accepted or considered.

For candidates in Sweden: For union information, please contact finansforbundet@nordea.se or SACONordea@nordea.com.

For candidates in Poland: Please include permit for processing personal data in CV as following:

In accordance with art. 6 (1) a and b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter ‘GDPR’. I agree to have: my personal data, education and employment history proceeded for the purposes of current and future recruitment processes in Nordea Bank Abp.

The administrator of your personal data is: Nordea Bank Abp operating in Poland through its Branch, address: Aleja Edwarda Rydza Śmiglego 20, 93-281 Łodź. Your personal data will be processed for the recruitment processes in Nordea Bank Abp. You have a right to access your personal data, right to rectify and right to delete. Disclosing the personal data in the scope specified by the provisions of Polish Labour Code from 26 June 1974 and executive acts are mandatory. Providing personal data is necessary to conduct the recruitment processes. The request for the deletion of your personal data means resignation from further participation in recruitment processes and causes the immediate removal of your application. Detailed information concerning processing of your personal data can be found at: nordea.com/en/doc/nordea-privacy-policy-for-applicants.pdf.

We reserve the right to reply only to selected applications.