Cloud Security ExpertExpert IT Security Specialist

This is the right role for you if you have:

• 5+ years’ experience in IT security, compliance, and risk management with a focus on cloud-native environments.
• Strong understanding of Cloud Provider security best practices (AWS, Azure, or GCP) and how to apply them to diverse business projects.
• Proven experience in risk leadership, specifically coordinating with legal, procurement, and technical teams during risk evaluation evaluations.
• Familiarity with AI security threats, governance frameworks, and the security implications of Large Language Models (LLMs) or AI integrations.
• Ability to translate technical risks into "business-friendly" language for non-technical stakeholders.

It would be ideal if you also:

• Have security or architecture certification from one (or more)of three main cloud providers AWS/Azure/GCP. For this role GCP is preferable.
• Have an experience in deployment or governance of cloud CNAPP tool e.g. Wiz

Nice to have certifications: Preferably AWS/Azure/GCP Security, CCSP

We are now looking for a Cloud Security Expert specialist to join our team and help us stay up to date with everchanging world of risks, security and compliance requirements in cloud and AI. Person who understands security best practices for applications, servers and networks and can translate that into Cloud security requirements and standards.

,[Provide expert guidance on selecting security controls across SaaS, PaaS, and IaaS models, ensuring alignment with industry frameworks and internal compliance., Participate in Third Party Risk Assessments (TPRM) and Quality Risk Assessments (QRA) to provide senior leadership with a comprehensive risk picture., Act as a central coordinator for AI Security, synthesizing use cases and assessing the security implications of emerging AI implementations., Function as a strategic liaison between Cyber Security org. and project teams, translating complex technical requirements into business-aligned security strategies., Review architectural designs and recommend enhancements to ensure "security by design" rather than "bolted-on" solutions., Monitor and approve security changes in Nordea main cloud providers, to ensure Nordea security posture isn’t weakened and risks are properly captured and approved.] Requirements: Cloud security, Security, Cloud, AI, SaaS, PaaS, IaaS, Use cases, risk management, AWS, Azure, GCP, LLMs Additionally: Maternity leave, Training budget, Sport subscription, Small teams, International projects, Free coffee, In-house hack days, Modern office, In-house trainings, Startup atmosphere, No dress code.