Cybersecurity Operations Manager

As our Cybersecurity Operations Manager, you will work in the Cybersecurity, Risk & Compliance function responsible for developing and driving the Vulnerability Management and Security Operations Capabilities in accordance with the defined Cybersecurity, Risk & Compliance strategy and roadmap supporting the implementation of the Cybersecurity Framework within the Digital organization and across the Bank.

Help us protect the Bank from cyber threats establishing a foundation for secure and compliant products, platforms and solutions

Cybersecurity, Risk & Compliance is a central function in the Ikano Bank Digital organization. The Digital organization provides Ikano Bank with sustainable and user-friendly digital capabilities, at best cost to serve by unlocking the full potential of our co-workers, partners and customers.

Cybersecurity, Risk & Compliance is a First Line Security function according to the three line of defense model and is operating within the Strategic, Tactical and Operational levels working within four primary domains;

• Security Requirements and Compliance Management
• Security Advisory and Support
• Security Assurance and Risk Management
• Security Operations and Security Incident Management

In your role as Cybersecurity Operations Manager, you will be a part of the Cybersecurity, Risk & Compliance department with the mission to support the Bank and the Digital organization in creating and managing secure & compliant products according to regulatory requirements and the risk appetite of the Bank providing value, trust and long-term relationships with stakeholders and our customers.

You will drive Vulnerability Management initiatives, taking a proactive approach to identify and address potential weak spots within the Bank's system landscape. This involves a thorough investigation into security controls, assessing their implementation effectiveness, and staying up to date of emerging attack surfaces to safeguard the Bank's assets effectively.

Furthermore, you will be responsible with overseeing Security Operations, ensuring the governance of technologies and processes that defines the implementation of our cybersecurity control framework. Your role involves assuring appropriate implementation and efficiency of security controls and requirements in accordance with the risk appetite of the Bank.

Key responsibility areas;

• Lead the development, implementation, and management of vulnerability management strategies and its capability. Oversee processes for identifying, evaluating, and reporting on security vulnerabilities in a timely and efficient manner
• Maintain and develop documentation on service descriptions, standards & procedures and define tactical roadmaps, visions and goals in the area of Vulnerability Management & Security Operations
• Clearly outline and determine security requirements necessary to assure proper implementations in platforms, products, solutions, and components. Ensure such requirements are effectively addressing current and emerging security challenges and threats
• Keep up-to-date with the continuous evolving cybersecurity threat landscape. Propose and drive improvement of security technologies and procedures to strengthen the Bank's defense against cyber threats ensuring that all security controls and processes are operating at their optimal efficiency and effectiveness
• Investigate and understand vulnerabilities, threat intelligence and security posture in assets for monitoring and acting on cyber threats
• Drive and implement a security reporting framework on the status and effectiveness of security controls and requirements incorporating KPI’s and maturity measurements
• Conduct regular quality assurance to ensure compliance with defined cybersecurity control framework, standards and regulations. Partake and steer risk assessments, security assessments, threat modeling, design reviews and configuration reviews to address potential security threats and vulnerabilities
• Work closely with the Digital organization, Information Security, Risk Control, Compliance, and business units to align cybersecurity initiatives with overall business objectives. Communicate and work with cybersecurity risks and strategies to stakeholders at strategic, tactical and operational levels
• Interfacing with operational teams and service providers to identify and address security issues and provide awareness and education on cybersecurity best practices
• Work with security aspects in hybrid environments incorporating on-premise, private & public cloud and XaaS delivery models. Manage relationships with external vendors and service providers. Ensure that third-party services align with the Bank's cybersecurity standards and requirements
• Assist in security incident management incorporating security expertise and advisory in all phases
• Assist and drive general day-to-day operational security tasks and activities

We offer you

You will be responsible for developing and driving the evolvement and lifecycle of the Vulnerability Management and Security Operations Capability in accordance with the defined Cybersecurity, Risk & Compliance strategy and roadmap to meet the evolving threat landscape and risk appetite of the Bank. The Cybersecurity Operations Manager will have a significant role in the overall implementation of the overall Cybersecurity strategy in where there will be many opportunities to contribute and influence affecting the evolvement of the company but also grow as an individual.

Are you the one for Ikano?

To be successful in this role you need to have;

Knowledge:

• Deep understanding within vulnerability management & threat management, how attacks work and how to protect against attackers
• Working with security controls and technologies in areas such as; Systems Administration, Network Security, Application Security, Endpoint Security, Identity, Authentication & Access Management, Data Protection & Cryptography, Monitoring, Vulnerability & Patch Management, High Availability & Disaster Recovery and Incident Response
• Penetration testing, security assessments, incident response and forensic investigations
• Working in hybrid environments incorporating on-premise, private & public cloud and XaaS delivery models
• Understand reporting needs as well as establishing reporting baselines for appropriate stakeholders
• Working with security in software development and lean-agile ways of working
• Knowledge of security in Lean-Agile & DevSecOps working methodologies
• Knowledgeable of Security Frameworks such as SANS, NIST and OWASP
• Knowledge of security in Lean-Agile & DevSecOps working methodologies
• Knowledge about, and work experience in, ServiceNow is considered beneficial

Experience & Qualifications:

• 5 or more years of progressive experience working with Cybersecurity
• Experience in operational risk and financial regulatory compliance
• Strong understanding of networks, operating systems, middleware/runtime and security concepts
• Skilled within technical security controls and implementations within Vulnerability Management and Security Operations such as firewalls, intrusion detection/prevention systems, antivirus software, and vulnerability scanners
• Excellent verbal and writing communication skills in Swedish & English
• Relevant certifications within the security operations domain, e.g; CISSP, CCSP, OSCP

Capabilities:

• Experience and competence in documentation and visualization, working with goals and roadmaps
• Ability to translate requirements into real-world configuration and scenarios
• Strong communication skills, with the ability to explain technical information to non-technical stakeholders
• Excellent problem-solving and analytical skills, with the ability to analyze complex systems and identify potential vulnerabilities and risks
• Be able to work both individually, independently and as a team

Join us now – together we will find a better way

In this role you will report to our Head of Cybersecurity, Risk & Compliance and will be based in Malmö, Hyllie

We look forward to receiving your application

About us

Ikano Bank creates possibilities for better living by offering simple, fair and affordable services, enabling a healthy economy for the many people. Our offer includes savings and loan products for consumers, sales support services for retailers, and leasing and factoring solutions for businesses. We conduct business in Sweden, Denmark, Finland, Norway, the UK, Poland, Germany and Austria. Ikano Bank is a part of the Ikano Group, an international group of companies active within banking, real estate, production, insurance, data analytics and retail, who owns 51 % of the Bank. Ingka Group, a strategic partner in the IKEA franchise system, operating 378 IKEA stores in 31 countries, owns the remaining 49 % of Ikano Bank. Ikano Bank’s head office is located in Malmö, Sweden and the company is registered in Älmhult, Sweden where the business was once founded.

 

---