Information Security Architect, Technology & Security Architecture Team

Job ID: 22904 
Would you like to be part of a challenging and exciting opportunity to shape the future of Nordea’s Information Security as a member of the Technology & Security Architecture team in Group Architecture?
At Nordea, we know our customers’ needs are changing – and we’re deeply committed to meeting them with the financial solutions of tomorrow. We’re creating an agile environment where we’re harnessing the power of technology – one where you can make an impact.  So bring your security skills, ideas and unique background. With us, you’ll find plenty of opportunities to grow and make your mark on something bigger
About this opportunity
The Nordea’s Security Architecture team is looking to add an experienced senior Information Security Architect to help the bank improve its security capabilities while validating that technology solutions developed to support business initiatives adhere to both Nordea’ security policies and any regulatory standards.
You will be responsible for the following key activities:

• Strategically shape the security posture of the bank to support the organization’s business objectives.  This includes the creation and/or maintenance of Vision, Strategy and/or other security-related documents.
• Develop Security Architecture patterns to solve a security problems homogenously across the bank.
• Create technical security blueprints to steer Solutions Architects in designing technology solutions that comply with the organization’ security policies and standards.
• Craft security-related technical standards to guide Development teams.
• Provide Security Architecture guidance to a variety of business or technology initiatives across several business domains.

Finally, the Senior Information Security architect works closely with the Chief Security Office (CSO) and the Cyber security teams, and is considered both a trusted mentor and technical advisor across the firm.  As such, the Senior Information Security architect is often called to guide and align initiatives toward a unified approach to support Nordea’s security needs. 
What you will be doing

• Devise current and future-state architecture blueprints for the bank’s overarching Information Security function. It includes documenting and diagramming conceptual, logical and physical architectures for environments located on-premises and Hyperscalers like AWS & Azure.
• Develop security principles and patterns so that they can be used by project teams when elaborating solutions. This includes the use of industry standard Security Architecture frameworks to ensure security controls are well integrated and meet the quality attributes of confidentiality, integrity and availability, as expected. 
• Participate in shaping the bank’s security capabilities by defining a vision and strategy that will help improve the security posture of the bank.
• Provide technical and architecture security guidance to initiatives.  It includes the creation of architecture and technical documentation such as High-Level Design and Low-Level / Technical Design artefacts.  Familiarization with the organization’s existing Information Security guidelines is necessary.
• Review proposed solutions for security soundness and compliance with the organization’s Information Security guidelines before their release to the Production environment.
• Work with the Cybersecurity team to guide the selection, acquisition, design, development, and implementation of integrated solutions & Security controls that support business needs. 

The role is based in Warszawa; Gdańsk; Gdynia; Helsinki; Oslo; Stockholm.
Who you are
Collaboration. Ownership. Passion. Courage. These are the values that guide us in being at our best- and that we imagine you share with us.
To succeed in this role, we believe that you need to have:

• 5-7 years of Professional IT experience.
• 1-3 years of Security Architecture experience, producing written design artifacts and solution diagrams.
• Knowledge of industry Security Architecture frameworks such as. SABSA, NIST, ISO27001-2, etc.
• Understanding and some experience in technology and security risk management.
• Some level of proficiency in leveraging, applying, combining, and placing security controls such as authentication, authorization, firewall, IPS, or IDS to properly secure any technology solutions.
• Some understanding of security protocols, cryptography and identity & access management (IAM).
• Effective communications skills for technical and non-technical audiences.
• Cloud experience is a must, preferably with AWS and Azure.
• Proven technical expertise in one or more of the following areas: Network and Cloud, IT Service design, Datacenter infrastructure, Workspace infrastructure.
• Knowledge of Zero Trust architecture is a plus.
• Knowledge of Threat Modelling and Threat Intelligence are a plus.
• Fluent in English, both written and spoken

Why join us?

• Opportunity to work in a leading financial institution that values diversity and inclusion.
• Work on strategic and large-scale initiatives and see your work make real impact.
• Competitive salary and benefits package.
• Flexible working conditions.
• International organization, focused on the Nordics but employing more than 100 nationalities and English is our corporate language.
• Community of more than 6.000 IT professionals.
• Ongoing training and professional development opportunities to expand your skills and knowledge.

At Nordea, we know that an inclusive workplace is a sustainable workplace. We deeply believe that our diverse backgrounds, experiences and characteristics make us better at serving customers and communities. So please come as you are.
If this sounds like you, get in touch!
Next steps
Submit your application no later than 29/03/2024. For more information please contact Bobby Rusbjerg at bobby.rusbjerg@nordea.com 
At Nordea, we know that an inclusive workplace is a sustainable workplace. We deeply believe that our diverse backgrounds, experiences, characteristics and traits make us better at serving customers and communities. So please come as you are.