Privileged Access Mgmt Consultant / Cyber Security

at  Skillspark AB

DETAILED DESCRIPTION OF WORK TASK TO BE CARRIED OUT

We are looking for a Senior Privileged Access Management (PAM) Consultant to join our PAM team within our Identity and Access Management (IAM) organization. This is an opportunity for you to be part of an international team, eager to support our mission to Protect the Bank: De-risked, Compliant, Secure & Protected.

As a Senior IT Security Consultant, you will play a key role in developing and maturing our PAM solution. You will take part in risk and issue mitigation and management activities. Contribute in developing a roadmap, identifying any gaps and mitigating them within PAM area. You will join in a PAM team together with such roles as Developer, Scrum Master, Product Owner and Business Analyst.

• Driving meetings with stakeholders in order to capture and document business requirements for new initiatives and potential improvements
• Work closely with Product Owner, Process Owner and IAM Architect to increase the maturity level of the PAM offering in Nordea
• Collaborate with DevOps team for creation of effective PAM controls and processes within the organization
• Execute application risk assessments, manage potential and ensure mitigation of identified risks

The role is based in modern premises located centrally in Helsinki, Stockholm, Oslo, or in the TriCity area in Poland.

DESCRIPTION OF KNOWLEDGE AND EXPERIENCE

Collaboration. Ownership. Passion. Courage. These are the values that guide us in being at our best – and that we imagine you share with us. To succeed in this role, we believe that you have:

• Several years of proven experience working with CyberArk or similar PAM solution
• Knowledge of IAM practices, for both on-premise and cloud environments
• Understanding of fundamental identity security principles (such as SoD, Least Privilege, Zero Trust)
• Previous experience of working with a DevOps team
• Understanding of IT processes and system development life cycle
• Familiarity with Cyber Security and IT frameworks/controls (such as CIS, NIST, ISO 2700x, COBIT, ITIL)
• Basic understanding of directory services, operating systems, databases and network devices
• Security certifications from relevant areas (IT/Cyber Security) are a plus
• Great collaboration and negotiation skills for working with various stakeholders within Nordea
• Strong technical, analytical and documentation skills
• A structured and organized way of working with the ability to deliver results with high quality
• The ability to do conversion between business and technical context
• The willingness to take ownership
• A strong can-do attitude and self-driven approach
• Fluency in English (spoken and written)

As a Senior IT Security Consultant, you will play a key role in developing and maturing our PAM solution. You will take part in risk and issue mitigation and management activities. Contribute in developing a roadmap, identifying any gaps and mitigating them within PAM area. You will join in a PAM team together with such roles as Developer, Scrum Master, Product Owner and Business Analyst.

• Driving meetings with stakeholders in order to capture and document business requirements for new initiatives and potential improvements
• Work closely with Product Owner, Process Owner and IAM Architect to increase the maturity level of the PAM offering in Nordea
• Collaborate with DevOps team for creation of effective PAM controls and processes within the organization
• Execute application risk assessments, manage potential and ensure mitigation of identified risk

Collaboration. Ownership. Passion. Courage. These are the values that guide us in being at our best – and that we imagine you share with us. To succeed in this role, we believe that you have:

• Several years of proven experience working with CyberArk or similar PAM solution
• Knowledge of IAM practices, for both on-premise and cloud environments
• Understanding of fundamental identity security principles (such as SoD, Least Privilege, Zero Trust)
• Previous experience of working with a DevOps team
• Understanding of IT processes and system development life cycle
• Familiarity with Cyber Security and IT frameworks/controls (such as CIS, NIST, ISO 2700x, COBIT, ITIL)
• Basic understanding of directory services, operating systems, databases and network devices
• Security certifications from relevant areas (IT/Cyber Security) are a plus
• Great collaboration and negotiation skills for working with various stakeholders within Nordea
• Strong technical, analytical and documentation skills
• A structured and organized way of working with the ability to deliver results with high quality
• The ability to do conversion between business and technical context
• The willingness to take ownership
• A strong can-do attitude and self-driven approach
• Fluency in English (spoken and written