Nordea: PL-IT Risk & Audit Compliance- IT Analyst

IT Risk & Audit and Compliance:

IT risk assessments, from risk identification through to action plans and risk monitoring, expert knowledge of risk frameworks, familiarity with Bank's risk methods, tools and approach a plus

Audit management- expert knowledge designing audit remediation plans and strategies as well as collecting and documenting evidences and technical artefacts, audit closure delivery and negotiation

Communicating risk and audit remediation plans, priority, efforts, risks and outcome to senior leadership, risk and control functions

General and specific bank compliance requirements (NIS2, DORA, FSA guidelines, ECB requirements), experience working on large scale cross organizational issues, document experience with closure of ECB and GIA audit issues

IT Security:

Network security- expert in dns, tcp/ip and network architecture including cloud

Database security- senior/expert with emphasis on backup strategies, user management and authentication, version and patch management

Security vulnerability management- senior/expert knowledge of security testing and scanning tools and techniques for vulnerability and patch management

Security threat management and wen based threats and mitigation of such threats, security risk management and governance a plus

Infrastructure and operations- incident and problem management- working knowledge of service delivery including CMDB systems

Banking:

Banking applications- knowledge of various banking areas 8transaction, corporate, asset management/trading etc.) and underlying technology and applications

Experience with banking technologies in general, including business continuity, business impact analysis and business analysis

Project management:

You will set up a project plan with all relevant communication and governance according to an industry standard project management approach

You ensure to have onboarded stakeholders, setting working agreements and follow up to achieve the required results.

Report of a weekly basis about progress, impediments and perceived risks

Taking proactively the needed actions to ensure the agreed result and to have the result in time.

Excellent organization skills, to plan the use of people and resources to meet deadlines. strong interpersonal skills, to motivate and lead “team members”

The ability to monitor and control timelines, good communication and negotiation skills, and manage expectations

Technical skills:

Knowledge of databases technologies, including Oracle, DB2, MSSQL, Postgress- architecture, security, compliance, user management- Senior

Knowledge of networks, knowledge of IP/DNS systems, network architecture in cloud and internet based asset- Expert

Sharepoint administration and development- design, development and maintenance of sharepoint lists, power apps and power automate flows- Expert

Python- mid-senior level of Python coding for data management and analytics

Soft skills:

Political sensitive

Gogether

Coaching and upskilling young audit/risk personnel

Persuasive

Trustworthy

Capable of being vulnerable (admit when a ‘wrong’ choice has been made)

Proven ability to recognize and advise on the remediation of control ineffectiveness

Ability to identify risks and articulate process and control weaknesse

Analytical and from that proactively proposing alternatives when needed.