Cybersecurity Operations Officer

Full Time/Part Time Full Time Who We Are Purpose of the Job As an organization in the financial sector, the Bank needs to continuously work with evaluating- and making sure the Bank’s security controls are matured, developed and improved in line with the current threat landscape. The Cybersecurity Operations Officer will play an important role in achieving this. By overseeing the Security Operations capability domain together with driving the Vulnerability Management area of the Bank, this role will lead the Bank into a more secure future. Responsibilities of the Job - Lead the development, implementation, driving the evolvement and management of vulnerability management strategies and its capability. Oversee processes for identifying, evaluating, and reporting on security vulnerabilities in a timely and efficient manner. Including operational activities related to this area.

• Maintain and develop documentation on service descriptions, standards & procedures and define tactical roadmaps, visions and goals in the area of Vulnerability Management & Security Operations
• Responsible with overseeing Security Operations. Clearly outline and determine security requirements necessary to assure proper implementations in platforms, products, solutions, and components. Ensure such requirements are effectively addressing current and emerging security challenges and threats in accordance with the risk appetite of the Bank.
• Drive, develop, maintain and operate security capabilities within the Microsoft Security E5/Defender area.
• Keep up to date with the continuous evolving cybersecurity threat landscape. Propose and drive improvement of security technologies and procedures to strengthen the Bank's defense against cyber threats ensuring that all security controls and processes are operating at their optimal efficiency and effectiveness
• Investigate and understand vulnerabilities, threat intelligence and security posture in assets for monitoring and acting on cyber threats
• Drive and implement a security reporting framework on the status and effectiveness of security controls and requirements incorporating KPI’s and maturity measurements
• Conduct regular quality assurance to ensure compliance with defined cybersecurity control framework, standards and regulations. Partake and steer risk assessments, security assessments, threat modeling, design reviews and configuration reviews to address potential security threats and vulnerabilities
• Work closely with the Technology organization, Information Security, Risk Control, Compliance, and business units to align cybersecurity initiatives with overall business objectives. Communicate and work with cybersecurity risks and strategies to stakeholders at strategic, tactical and operational levels
• Interfacing with operational teams and service providers to identify and address security issues and provide awareness and education on cybersecurity best practices
• Work with security aspects in hybrid environments incorporating on-premise, private & public cloud and XaaS delivery models. Manage relationships with external vendors and service providers. Ensure that third-party services align with the Bank's cybersecurity standards and requirements
• Assist in security incident management incorporating security expertise and advisory in all phases
• Assist and drive general day-to-day operational security tasks and activities including but not limited to vulnerability response, Microsoft Entra administration, FIM management

Education Level Bachelor's Degree Experience/Demonstrated Competencies - 5 or more years of progressive experience working with Cybersecurity

• Experience in operational risk and financial regulatory compliance
• Strong understanding of networks, operating systems, middleware/runtime and security concepts
• Skilled within technical security controls and implementations within Vulnerability Management and Security Operations such as firewalls, intrusion detection/prevention systems, antivirus software, and vulnerability scanners
• Skilled within Microsoft security E5/Defender area

Language Competencies - Excellent verbal and writing communication skills in Swedish & English Knowledge required - Deep understanding within vulnerability management & threat management, how attacks work and how to protect against attackers

• Working with security controls and technologies in areas such as; Systems Administration, Network Security, Application Security, Endpoint Security, Identity, Authentication & Access Management, Data Protection & Cryptography, Monitoring, Vulnerability & Patch Management, High Availability & Disaster Recovery and Incident Response
• Strong competence within the Microsoft Security E5/Defender and Copilot area. Including Purview and Data Analytics.
• Understanding and knowledgeable of identity security
• Penetration testing, security assessments, incident response and forensic investigations
• Working in hybrid environments incorporating on-premise, private & public cloud and XaaS delivery models
• Understand reporting needs as well as establishing reporting baselines for appropriate stakeholders
• Working with security in software development and lean-agile ways of working
• Knowledge of security in Lean-Agile & DevSecOps working methodologies
• Knowledgeable of Security Frameworks such as SANS, NIST and OWASP
• Knowledge about, and work experience in, ServiceNow is considered beneficial

Capabilities for this job - Experience and competence in documentation and visualization, working with goals and roadmaps

• Ability to translate requirements into real-world configuration and scenarios
• Strong communication skills, with the ability to explain technical information to non-technical stakeholders
• Excellent problem-solving and analytical skills, with the ability to analyze complex systems and identify potential vulnerabilities and risks
• Be able to work both individually, independently and as a team

What motivates you? - A deep commitment to enhancing the bank's cybersecurity resilience, proactively identifying and mitigating vulnerabilities

• A genuine interest in staying at the forefront of cybersecurity trends and evolving threat landscapes to protect the organization
• Motivated by the challenge of developing and implementing comprehensive security strategies to defend against sophisticated cyber threats
• Dedicated to fostering a culture of cybersecurity awareness and best practices within the organization, ensuring all team members are informed and vigilant
• Passionate about leveraging technology and innovative solutions to strengthen the bank's defense mechanisms
• Enthusiastic about collaborating with various departments to align cybersecurity measures with the bank's overall objectives, enhancing organizational security posture
• A strong desire to mentor and develop team members, sharing knowledge and expertise in cybersecurity
• Committed to continuous improvement and learning, constantly seeking ways to enhance the bank's security operations and vulnerability management capabilities
• Driven by the goal of ensuring the bank's compliance with regulatory standards and frameworks, minimizing cybersecurity risks
• Motivated to create and maintain strong relationships with external vendors and service providers, ensuring they meet the bank's cybersecurity standards

Ready to apply? Salary (per annum) According to the market Ikano Bank Benefits Annual Social Day for all Employees Favorable Conditions for Ikano Bank Products Applications Close Date 10 Dec 2026