Cloud Security Specialist

Nordea is a leading Nordic universal bank. We are helping our customers realise their dreams and aspirations - and we have done that for 200 years. We want to make a real difference for our customers and the communities where we operate - by being a strong and personal financial partner. Job ID: 23719  Would you like to join our cloud team? We are now looking for a Cloud Security Specialist to design robust security controls and enhancing our overall security posture within the AWS and Azure cloud environment. At Nordea, we know our customers’ needs are changing – and we’re deeply committed to meeting them with the financial solutions of tomorrow. We’re creating an agile environment where we’re harnessing the power of technology – one where you can make an impact. So bring your skills, ideas and unique background. With us, you’ll find plenty of opportunities to grow and make your mark on something bigger.  About this opportunity Welcome to the Cloud Engineering and Operations team. We are seeking a highly skilled AWS and Azure Cloud Security Specialist to join our dynamic team. The ideal candidate will play a pivotal role in designing robust security controls and enhancing our overall security posture within the AWS and Azure cloud environment. The candidate should possess a strong background in cloud services, compliance standards, and hands-on experience in implementing security measures. What you’ll be doing: Conduct thorough Security Control Policy (SCP) and Identity & Access Management (IAM) reviews, and provide recommendations for enhancements. Evaluate and propose hardening controls for Cloud platform, ensuring a secure and resilient infrastructure. Gain a thorough understanding of the organization’s security guidelines and control objectives related to cloud platforms. Participate in risk assessment and provide recommendations for mitigations identified risks. Demonstrate expertise in compliance standards, particularly with CIS benchmarks, to ensure alignment with industry best practices. Utilize Cloud Security Hub to support security operations, identify potential threats, and implement proactive security measures. Proficient in writing code using Terraform and CloudFormation to create and manage security controls within AWS Config or Azure Policy and other relevant services. Collaborate with cross-functional teams to integrate security measures into the DevOps pipeline, promoting a secure-by-design approach. Stay abreast of the latest security trends, vulnerabilities, and AWS/Azure services to continuously improve security strategies. You’ll join a team where cloud platform is significantly growing, and you get plenty of opportunities to add value to the team by exploring and applying skills. The role is based in Warszawa; Gdańsk; Gdynia; Helsinki; Stockholm; Łódź. Who you are Collaboration. Ownership. Passion. Courage. These are the values that guide us in being at our best – and that we imagine you share with us.   To succeed in this role, we believe that you: * Extensive experience in designing and implementing security controls within AWS and Azure.  * Strong knowledge of AWS and Azure services, particularly AWS Security Hub and Azure Policy.  * Proficiency in scripting and coding using Terraform and CloudFormation for automated control deployment.  * In-depth understanding of compliance standards, specifically CIS benchmarks.  * Excellent communication skills to articulate security concepts and recommendations effectively.  * Proven ability to work collaboratively in a team environment. If this sounds like you, get in touch! Next steps Submit your application no later than 08/05/2024. For more information, you’re welcome to contact Anand Gundanna at anand.gundanna@nordea.com. At Nordea, we know that an inclusive workplace is a sustainable workplace. We deeply believe that our diverse backgrounds, experiences, characteristics and traits make us better at serving customers and communities. So please come as you are. Please be aware that any applications or CVs coming through email or direct messages will not be accepted or considered.  For union information, please contact Finansförbundet at finansforbundet@nordea.se or SACO at SacoNordea@nordea.com.