Information Security Architect, Group Architecture

Information Security Architect, Group Architecture Nordea Nordea is a leading Nordic universal bank – we are a strong and personal financial partner with financial solutions that best meet your needs so you can achieve your goals and realise your dreams.

View company page

Job ID:22904

Would you like to be part of a challenging and exciting opportunity to shape the future of Nordea's information security as a member of the Technology & Security Architecture team in Group Architecture?

At Nordea, we know our customers' needs are changing – and we're deeply committed to meeting them with the financial solutions of tomorrow. We're creating an agile environment where we're harnessing the power of technology – one where you can make an impact. So bring your security skills, ideas and unique background. With us, you'll find plenty of opportunities to grow and make your mark on something bigger

About this opportunity

The Nordea's Security Architecture team is looking to add an experienced senior Information Security Architect to help the bank improve its security capabilities while validating that technology solutions developed to support business initiatives adhere to both Nordea' security policies and any regulatory standards.

You will be responsible for the following key activities:

• Strategically shape the security posture of the bank to support the organization's business objectives. This includes the creation and/or maintenance of Vision, Strategy and/or other security-related documents.
• Develop security architecture patterns to solve a security problems homogenously across the bank.
• Create technical security blueprints to steer Solutions Architects in designing technology solutions that comply with the organization' security policies and standards.
• Craft security-related technical standards to guide Development teams.
• Provide security architecture guidance to a variety of business or technology initiatives across several business domains.

Finally, the Senior Information Security architect works closely with the Chief Security Office (CSO) and the Cyber security teams, and is considered both a trusted mentor and technical advisor across the firm. As such, the Senior Information Security architect is often called to guide and align initiatives toward a unified approach to support Nordea's security needs.

What you will be doing:

• Devise current and future-state architecture blueprints for the bank's overarching information security function. It includes documenting and diagramming conceptual, logical and physical architectures for environments located on-premises and Hyperscalers like AWS & Azure.
• Develop security principles and patterns so that they can be used by project teams when elaborating solutions. This includes the use of industry standard security architecture frameworks to ensure security controls are well integrated and meet the quality attributes of confidentiality, integrity and availability, as expected.
• Participate in shaping the bank's security capabilities by defining a vision and strategy that will help improve the security posture of the bank.
• Provide technical and architecture security guidance to initiatives. It includes the creation of architecture and technical documentation such as High-Level Design and Low-Level / Technical Design artefacts. Familiarization with the organization's existing Information Security guidelines is necessary.
• Review proposed solutions for security soundness and compliance with the organization's Information Security guidelines before their release to the Production environment.
• Work with the Cybersecurity team to guide the selection, acquisition, design, development, and implementation of integrated solutions & security controls that support business needs.

The role is based inWarszawa; Gdańsk; Gdynia; Helsinki; Oslo; Stockholm.

Who you are

Collaboration. Ownership. Passion. Courage. These are the values that guide us in being at our best- and that we imagine you share with us.

To succeed in this role, we believe that you need to have:

• 5-7 years of Professional IT experience.
• 1-3 years of Security Architecture experience, producing written design artifacts and solution diagrams.
• Knowledge of industry security architecture frameworks such as. SABSA, NIST, ISO27001-2, etc.
• Understanding and some experience in technology and security risk management.
• Some level of proficiency in leveraging, applying, combining, and placing security controls such as authentication, authorization, firewall, IPS, or IDS to properly secure any technology solutions.
• Some understanding of security protocols, cryptography and identity & access management (IAM).
• Effective communications skills for technical and non-technical audiences.
• Cloud experience is a must, preferably with AWS and Azure.
• Proven technical expertise in one or more of the following areas: Network and Cloud, IT Service design, Datacenter infrastructure, Workspace infrastructure.
• Knowledge of Zero Trust architecture is a plus.
• Knowledge of Threat Modelling and Threat Intelligence are a plus.
• Fluent in English, both written and spoken.
• Opportunity to work in a leading financial institution that values diversity and inclusion.
• Work on strategic and large-scale initiatives and see your work make real impact.
• Competitive salary and benefits package.
• Flexible working conditions.
• International organization, focused on the Nordics but employing more than 100 nationalities and English is our corporate language.
• Community of more than 6.000 IT professionals.
• Ongoing training and professional development opportunities to expand your skills and knowledge.

If this sounds like you, get in touch

Next steps

Submit your application no later than 29/03/2024. For more information please contact BobbyRusbjerg

At Nordea, we know that an inclusive workplace is a sustainable workplace. We deeply believe that our diverse backgrounds, experiences, characteristics and traits make us better at serving customers and communities. So please come as you are.

Only for candidates in Sweden: For union information, please contact or

Only for candidates in Poland:Please include permit for processing personal data in CV as following:

In accordance with art a and b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter 'GDPR'. I agree to have: my personal data, education and employment history proceeded for the purposes of current and future recruitment processes in Nordea Bank Abp.

The administrator of your personal data is: Nordea Bank Abp operating in Poland through its Branch, address: Aleja Edwarda Rydza Śmiglego 20, Łodź. Your personal data will be processed for the recruitment processes in Nordea Bank Abp. You have a right to access your personal data, right to rectify and right to delete. Disclosing the personal data in the scope specified by the provisions of Polish Labour Code from 26 June 1974 and executive acts are mandatory. Providing personal data is necessary to conduct the recruitment processes. The request for the deletion of your personal data means resignation from further participation in recruitment processes and causes the immediate removal of your application. Detailed information concerning processing of your personal data can be found at:

We reserve the right to reply only to selected applications.

Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.

#J-18808-Ljbffr

---