(Senior) IT Security Specialist - Security Findings Governance

<p>Job ID: 20433</p> <p> </p> <p>Would you like to become the pillar of Security Findings Governance Program in Nordea? We are looking for a true driver who will enable the execution of findings remediation and strive to enhance security posture of Nordea! <br/>  </p> <p>About this opportunity</p> <p> </p> <p>Welcome to Cyber Security Governance Team. We add value by proactively de-risking the bank through enhancing findings remediation endeavours via using innovative capabilities to be fit for the constantly evolving threat landscape.</p> <p> </p> <p>What you’ll be doing:</p> <ul> <li>Identifying remediation gaps and driving towards their resolution</li> <li>Advising stakeholders on the available solutions and actions that must be undertaken</li> <li>Analysing scanning results to define concrete steps directed at de-risking the bank</li> <li>Collaborating with remediation accountable and responsible stakeholders</li> <li>Ensuring security findings are understood and remediation pace is adequate</li> </ul> <p> </p> <p>You’ll join a team of passionate professionals in IT Security area. The role is based in Gdynia, Warsaw or Łódź.</p> <p> </p> <p>Who you are</p> <p> </p> <p>Collaboration. Ownership. Passion. Courage. These are the values that guide us in being at our best – and that we imagine you share with us.  </p> <p> </p> <p>To succeed in this role, we believe that you:</p> <ul> <li>Demonstrate a high degree of structure, flexibility, planning and prioritization skills, and deliver timely service consistently.</li> <li>Are comfortable with stakeholder management and can explain technical findings to both technical &amp; non-technical stakeholders.</li> <li>Are eager to work along with IT teams to ensure remediation management quality.</li> <li>Are self-driven individual with high focus on resolving issues if they arise, able to gather information from different sources.</li> </ul> <p> </p> <p>Your experience and background: </p> <ul> <li>Very good understanding of security domains, especially security findings assessment and remediation areas, supported by at least 1-2 years of experience.</li> <li>Governance knowledge, proven by experience in at least one of the security findings fields: vulnerabilities on workstations and/or servers, vulnerabilities on containers, SAST, security baseline deviations (policy compliance).</li> <li>Knowledge and experience within the fields of DAST, threat modelling, problem management, Secure DevOps, DORA, OWASP is considered an advantage.</li> <li>Advanced trouble-shooting and conceptual skills with the ability to come up with solutions to uncommon problems related to remediation actions.</li> <li>Knowledge of tools &amp; methodologies for security findings assessment and enrichment would be an asset.</li> <li>Ability to interpret results using a variety of techniques, ranging from simple exploratory data analysis to statistical modelling would be an asset.</li> <li>Good understanding of risk based approach and risk management.</li> <li>Experience in cross-organizational collaboration/negotiation.</li> <li>Fluent business and technical English is a must (both written and spoken).</li> </ul> <p> </p> <p>Main benefits of working at Nordea Poland: </p> <ul> <li>Reasonable workload and Nordic work atmosphere.</li> <li>Development opportunities - you will have access to e-learning platforms like Udemy and O'Reilly, plus have a chance to take part in conferences across Poland and Europe.</li> <li>Hybrid work model to have a chance to integrate with the Team, there is a high flexibility.</li> <li>Cafeteria platform - 350 PLN net.</li> <li>Pension program (PPE): Nordea pays extra 3,5% of your salary gross monthly to a dedicated pension account.</li> <li>Profit-sharing program: even up to 1600 EUR per year on top of the salary.</li> <li>Recommendation program: from 1000 to 12000 PLN net if you find a colleague that joins Nordea, and much more...</li> </ul> <p> </p> <p>If this sounds like you, get in touch!</p> <p> </p> <p>Next steps<br/> <br/> At Nordea, we know that an inclusive workplace is a sustainable workplace. We deeply believe that our diverse backgrounds, experiences, characteristics and traits make us better at serving customers and communities. So please come as you are.<br/> <br/> Please include permit for processing personal data in CV as following:<br/> <br/> In accordance with art. 6 (1) a and b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter ‘GDPR’. I agree to have: my personal data, education and employment history proceeded for the purposes of current and future recruitment processes in Nordea Bank Abp.<br/> <br/> The administrator of your personal data is: Nordea Bank Abp operating in Poland through its Branch, address: