Nordea: PL-IT Risk & Audit Compliance- IT Analyst (42559)

IT Risk & Audit and Compliance:

IT risk assessments, from risk identification through to action plans and risk monitoring, expert knowledge of risk frameworks, familiarity with Bank's risk methods, tools and approach a plus
Audit management- expert knowledge designing audit remediation plans and strategies as well as collecting and documenting evidences and technical artefacts, audit closure delivery and negotiation
Communicating risk and audit remediation plans, priority, efforts, risks and outcome to senior leadership, risk and control functions
General and specific bank compliance requirements (NIS2, DORA, FSA guidelines, ECB requirements), experience working on large scale cross organizational issues, document experience with closure of ECB and GIA audit issues

IT Security:

Network security- expert in dns, tcp/ip and network architecture including cloud
Database security- senior/expert with emphasis on backup strategies, user management and authentication, version and patch management
Security vulnerability management- senior/expert knowledge of security testing and scanning tools and techniques for vulnerability and patch management
Security threat management and wen based threats and mitigation of such threats, security risk management and governance a plus
Infrastructure and operations- incident and problem management- working knowledge of service delivery including CMDB systems

Banking:

Banking applications- knowledge of various banking areas 8transaction, corporate, asset management/trading etc.) and underlying technology and applications
Experience with banking technologies in general, including business continuity, business impact analysis and business analysis

Project management:

You will set up a project plan with all relevant communication and governance according to an industry standard project management approach
You ensure to have onboarded stakeholders, setting working agreements and follow up to achieve the required results.
Report of a weekly basis about progress, impediments and perceived risks
Taking proactively the needed actions to ensure the agreed result and to have the result in time.
Excellent organization skills, to plan the use of people and resources to meet deadlines. strong interpersonal skills, to motivate and lead “team members”
The ability to monitor and control timelines, good communication and negotiation skills, and manage expectations

Technical skills:
Knowledge of databases technologies, including Oracle, DB2, MSSQL, Postgress- architecture, security, compliance, user management- Senior
Knowledge of networks, knowledge of IP/DNS systems, network architecture in cloud and internet based asset- Expert
Sharepoint administration and development- design, development and maintenance of sharepoint lists, power apps and power automate flows- Expert
Python- mid-senior level of Python coding for data management and analytics

Soft skills:
Political sensitive
Gogether
Coaching and upskilling young audit/risk personnel
Persuasive
Trustworthy
Capable of being vulnerable (admit when a ‘wrong’ choice has been made)
Proven ability to recognize and advise on the remediation of control ineffectiveness
Ability to identify risks and articulate process and control weaknesse
Analytical and from that proactively proposing alternatives when needed.