Senior Technology Risk Specialist

The Technology Risk and Controls (TRC) risk management organization drives the institutionalization of Technology Risk Management disciplines in the Group with the objective of providing a transparent view of Danske Bank’s IT risk posture at any given time.

We are looking for a colleague to join Technology Risk Assessments (TRA) team, under the TRC department. Where we provide Information Technology and Security risk management service. Our objective is to ensure a risk-based approach on new services and technology solutions in accordance with the enterprise risk management framework. We partner with technology and business units on a daily basis and operate in a customer centric service organization structure.

Depending on your knowledge and experience, we may offer a different seniority of this role.

• 5 years’ experience in IT Risk Management, IT security, IT risk and control encompassing or equivalent (e.g. IT Risk management, IT Controls management, IT Auditing experience)
• Working familiarity with the ISF Standard of Good Practice, NIST CSF, ISO27k, PCI DSS or similar
• IT risk and control assessments (leading and facilitating workshops) experience on services, applications, infrastructure components, etc.
• Experience in IT Risk treatment decision process (IT Risk mitigation plans)
• GRC (Governance Risk Compliance) tooling (preferably ServiceNow)
• Upper-Intermediate level spoken and written English
• Strong analytical, communication, teamwork and interpersonal skills, resilient to time pressure conditions

We will consider as a bonus:

• IT related background (experience in system and network design, cloud infrastructure, system administration)
• Professional security certification (e.g. CISM, CISA, CRISK, ISO 27k1 Lead Implementer, CISSP, ITIL, COBIT, etc.)