Senior Supplier Risk Manager, Gdynia/Gdańsk or Stockholm

Job ID: 22063

 

Would you like to ensure that Nordea’s Information Communication Technologies (ICT)  suppliers are providing maximum value to Nordea by delivering stable IT services withing agreed performance level and risk appetite? Then here is a great opportunity for you. 
 
We are looking for a Senior Supplier Risk Manager to join our Supplier Performance Management Function. This is an opportunity to join a great international team on a mission to achieve optimal outcome through collaboration with our suppliers.
 
At Nordea, we know our customers’ needs are changing – and we’re deeply committed to meeting these requirements with our solutions. We’re creating an agile environment where we’re harnessing the power of technology – one where you can make an impact. So bring your skills, ideas and unique background. With us, you’ll find plenty of opportunities to grow and make your mark on something bigger. 
 
Your future responsibilities

Welcome to Supplier Performance Management team! We optimize supplier performance and enhance risk management, unlocking sustained business value for our organization. We also implement various reporting solutions and needed governance around Nordea’s ICT suppliers. 

You will join an international team where people are the most important and work is not only a place to go! We take pride in what we do, prioritize a learning culture and strive to have fun in our daily work. The role is based in Poland (Gdynia/Gdansk) or Sweden (Stockholm). In our team we follow hybrid model of working. 
 
What you’ll be doing:

• Continuously develop and improve the Supplier Control Framework through collaboration with stakeholders and the use of technology and automation
• Monitor changes in regulations and industry best practices and adapt compliance strategies to maintain alignment with evolving requirements
• Develop and deliver training programs for both internal teams and suppliers to enhance awareness and understanding of compliance requirements
• Collaborate with legal and procurement teams to review and negotiate supplier contracts, incorporating compliance requirements and mitigating potential risks
• Maintain and update procedures, process documents and reports related to supplier compliance
• Lead and conduct regular supplier reviews on the contractual security controls, identify areas for improvement and work with suppliers to address non-compliance issues
• Review supplier processes, systems, controls, and audit reports (i.e. SOC, ISO. etc)  for ongoing compliance with information security guidelines and regulations
• Report on assessment outcomes, findings, and recommendations for remediation
• Monitor supplier corrective action plans and review evidence for closure of findings
• Work with internal stakeholders to understand the “what” and “how” of supplier services to accurately assess level of risk and scope of assessment
• Develop and maintain long-standing relationships with Nordea’s suppliers and stakeholders

 

Who you are

Collaboration. Ownership. Passion. Courage. These are the values that guide us in Nordea being at our best – and that we hope you share with us. You’re collaborative, communicative, dependable, willing to speak up – even when it’s difficult – and committed to empowering others.

 

To succeed in this role, we believe that you:

• Capable of working independently, adapting to change, and thriving in a fast-paced environment
• Skilled at collaborating with others, both within and across teams
• Detail-oriented with strong organizational, critical thinking and analytical skills; able to maintain a balance between the details and the larger picture
• Excellent communicator, able to convey complex ideas in simple, non-technical terms
• Able to manage multiple tasks simultaneously and adjust priorities as needed
• Proactive and self-motivated, with a demonstrated ability to take charge and solve problems
• Committed to ongoing learning through new knowledge and experiences 

 

Your experience and background:

• Possesses extensive knowledge of third-party risk management, including the ability to analyse technical documentation, regulatory guidance, and contracts to extract valuable insights and present findings
• Experienced in the field of information security
• Knowledgeable in control frameworks and industry standards such as SOC and ISO
• Familiar with the use of vendor security questionnaires, such as the Standardized Information Gathering (SIG) or other templates for supplier assessments
• Has a strong technical background and a diverse skillset, enabling the understanding of various technologies, systems, and risks
• Well-versed in IT Service M