(expert) Cyber Security - SFG 2026/ 2027

Detailed description of work task to be carried out

* Lead the identification of remediation gaps and drive strategic resolution initiatives across the organisation

* Provide expert guidance to stakeholders on remediation strategies, ensuring alignment with security best practices and regulatory expectations

* Analyse complex scanning results to define actionable steps that reduce risk exposure for the bank

* Collaborate cross-functionally with accountable and responsible remediation owners to ensure timely and effective execution

* Ensure security findings are clearly understood and that remediation efforts are progressing at an appropriate pace

* Demonstrate autonomy and ownership in task execution, maintaining a proactive governance approach and influencing remediation outcomes

*Contribute in design of risk scoring to enable near real-time, risk-based prioritization and faster remediation of critical vulnerabilities

Must-have knowledge and experience

* Deep understanding of security domains, especially security findings assessment and remediation areas, supported by at least 3+ years of hands-on experience

* Expert-level knowledge of vulnerability scoring frameworks, security risk assessment methodologies, and governance processes used to determine severity, prioritization, and remediation timelines for security findings

* Deep understanding of modern AI threats and their impact on security posture

* Knowledge and experience within the fields of problem management, Secure DevOps, DORA, OWASP

* Advanced trouble-shooting and conceptual skills with the ability to come up with solutions to uncommon problems related to remediation actions

* Ability to interpret and communicate results using exploratory data analysis and statistical modelling techniques

* Good understanding of risk based approach and risk management

* Experience in cross-organizational collaboration/negotiation

* Prepare and deliver presentations to stakeholders, clearly communicating remediation progress, risks, and strategic recommendations

* Fluent business and technical English is a must (both written and spoken)

* Demonstrated experience in automation, preferably using Python, Apache Airflow, and/or Power Automate

* Practical application of AI technologies in governance processes and automation workflows

* Ability to mentor team members and contribute to knowledge sharing across the security function