Vulnerability Management SPOC in Home Journey Domain

Job ID: 5973

Welcome to Group Technology, where we pride ourselves on engineering solutions and direct Nordea’s transformation by providing a holistic technological view and structured understanding of the bank, and its surrounding environment to enable the Customer Vision and the Business Strategy.

We are looking for a Vulnerability Management SPOC for a permanent, full-time position to lead and coordinate vulnerability remediation across applications and infrastructure. You will be the central point of contact connecting Cyber Security, Application Owners, Providers, Operations and Development teams, ensuring that security findings are prioritised, acted on and followed through to closure.

Nordea is a place where traditions meet tomorrow. We’re not just a bank; we’re a tech employer on a mission to evolve finance securely and responsibly. Together, we impact millions of people’s daily lives by ensuring they can access our solutions anytime, anywhere, while safeguarding their personal data and wealth. Join us in making an impact on the banking industry.

About our team

You will join a collaborative technology team responsible for helping application and infrastructure teams reduce security risk. We coordinate work across organisational boundaries, strengthen ownership and turn security findings into clear, achievable remediation plans.

This role in based in Finland and Poland.

What you’ll be doing

In this role, you will:

• Own and coordinate vulnerability remediation across applications and infrastructure, prioritising and tracking security findings through to closure.
• Drive compliance with vulnerability governance processes and remediation timelines, including clear communication and escalation of overdue findings.
• Coordinate with Development and Operations teams to assess findings and safely test, deploy and verify security fixes.
• Support risk-management processes and the implementation of compensating controls when permanent remediation cannot be completed within the required timeframe.
• Provide management reporting and actionable insights on vulnerability status and remediation progress, while collaborating with Group Technology and Cyber Security on upgrades, requirements and process improvements.

Who you are

This is the right role for you if you take ownership, create momentum and enjoy bringing people together around a shared goal. You communicate complex security topics clearly, work in a structured way and can challenge constructively while maintaining strong working relationships. You are comfortable coordinating across several stakeholders and keeping focus on delivery, risk reduction and continuous improvement. You actively identify opportunities to simplify and standardise ways of working, and you drive efficiency through automation and the responsible use of AI—for example, by improving vulnerability triage, tracking, reporting and management insights—while ensuring appropriate human oversight, data protection and security controls.

Your background and skills include:

• Relevant IT education or equivalent practical experience, together with a background in software development, IT operations or a closely related area.
• Strong understanding of vulnerability management, patch management and cybersecurity governance.
• Experience working with application development and infrastructure teams and driving remediation across multiple stakeholders.
• Strong communication, coordination and reporting skills, with the ability to turn findings into clear actions and follow them through.

It would be ideal if you also:

• Have hands-on experience with security-scanning, risk-management or vulnerability-tracking tools.
• Have experience improving vulnerability-management processes, reporting or remediation workflows in a complex organisation.

If this sounds like you, get in touch!