Senior Information Security Specialist, Nordea Asset Management

.Senior Information Security Specialist, Nordea Asset Management Lisboa Job ID: 24405 We are looking for a Senior Information Security Specialist to join the Information Security function in Nordea Asset Management. As a Senior Information Security Specialist you will play a vital role in embedding information security practices, controls and culture within Nordea Asset Management as well as determining our exposure to information security risks.At Nordea Asset Management, we see that the world is changing fast – and we want to be one step ahead of the curve. That's why we're deeply committed to providing the financial solutions of tomorrow to our customers. We're creating an agile environment where we experiment and grow together – and we need your ideas and interesting background. With us, you'll be in good company with a chance to make your mark on something bigger. About this opportunity Welcome to the Information Security Function within Nordea Asset Management. We add value by maintaining appropriate levels of resiliency and security and ensuring that our customers' data and internal data, our services and underlying infrastructure are protected and resilient.What you'll be doing: As Senior Information Security Specialist, you'll be responsible for the followings: Assessment and Assurance Provide support for the maintenance of the business continuity and crisis management framework (BCCM) Conduct security (risk and control) assessments and advise on necessary improvements to enhance security controls and practices as needed Work with business units and technologists to identify (Information security and business continuity) risks and support the organisation in implementing security controls to mitigate them Assist in determining exposure to information/cyber security/cloud security risk and resilience risk as well as evaluating readiness to mitigate them effectively Help articulate risk appetite concerning information/cyber security and BCCM Advisory and Communication Provide guidance to the organisation on information security and business continuity principles, controls and control design. Assist and guide the organisation in the implementation of BCCM framework Support remediation activities to ensure that internal audit, legal and regulatory requirements are met. Assist the organisation in meeting application security testing requirements Ensure that an adequate (as well as business friendly) assurance and reporting framework including evidence, KPIs and KRIs are in place Coordination Participate in internal and external risk assessments Coordinate information security assessments and mitigating measures with relevant stakeholders IT, Legal, Operations and Privacy stakeholders Collaborate across central and local functions to establish sustainable approaches and forge necessary alignments