Manager, Information Security at BEC Financial Technologies - Roskilde

Manager, Information Security at BEC Financial Technologies – Roskilde

Do you want to impact information security in a complex business that represents a critical part of the financial infrastructure in Denmark? Do you also believe that strong frameworks, guidelines, and control measures can help in safeguarding information technology platforms and solutions? And do you want to be exposed to the Executive Management level and contribute to a crucial and integral part of BEC’s TechUp Winning Customer strategy? Then, we recommend you continue reading.

As manager of the information security team, you are part of the Risk & Security unit that secures critical national financial infrastructure and maintains and develops a solid and effective BEC risk management and security level. The Risk and Security unit consists of three teams: IT Risk Management, Enterprise Risk Management, and Information security. You will report to the Area Director, Risk & Security.

BEC manages information security and risk management according to the principle of “three lines of defence”, and you will in this role represents the second line of defence.

As the business is changing, the legal requirements are increasing, and the technology landscape is becoming increasingly complex, there is a continuous need for defining, scaling, changing, and advising about security frameworks, guidelines, procedures, and much more – and to do it with a pragmatic and business-minded focus.

Workplace is BEC’s headquarter in Roskilde.

Information Security Manager spearheading information security across innovative technologies

As Information Security Manager, you ensure an adequate and strong security setup in BEC that secures a consistently high level of security compared to the rest of the Danish financial sector. Some of the strategic topics that you focus on are related to cloud security, secure development, API security as well as secure operation. BECs ISMS builds on ISO 27001. Together with a team of 11 engaged specialists, in Denmark and Poland, you set frameworks and requirements for information security, support security risk assessments, guides BEC on security matters, is responsible for the business continuity framework, and identify threats, opportunities and trends that can have an impact across the business areas.

Just as important as your ability to dive deep in discussions about different sets of security requirements, compliance standards and threat landscapes, you also succeed in your leadership of people and stakeholders. You support in people development initiatives and act as role model for the behaviour and “customer” focus that you want your part of the organisation to represent. Besides internal stakeholders, you interact regularly with partners, vendors, authorities, industry and security networks, and key customers.

Seasoned Security Officer or CISO with experience from managing critical infrastructure

Your qualifications include effective communication and collaboration skills as you will be working closely with various stakeholders, where you will articulate complex security concepts in a clear and concise manner. Through your communication and a compelling vision for cybersecurity, you engage and motivate people for changes in systems, processes, and behaviours. In your leadership, you create room and provide support to your team to secure their development as well as you are focused on continuous learning yourself, keeping up to date with the latest trends, threats, and technologies. It is also natural for you to create structures and efficient processes that support your team in their work.

Besides strong communication and leadership skills, you have following qualifications:

• A bachelor’s or master’s degree in computer science, information technology, cybersecurity, or a related field
• People management experience – experience from leading specialists.
• Substantial experience in information security and risk management, with a minimum of 7-8 years’ experience, and with some knowledge about securing critical infrastructure.
• Experience in setting up structures for incident response and ability to work along with 1st line in case of security incidents.
• Experience with large network setups, different types of operating systems, cloud computing, firewalls, etc.
• Knowledge of relevant security related standards and certifications, e.g., ISO27000, NIST, PCI-DSS – and perhaps a CISSP or CISM certification or similar.
• Ability to communicate in Danish as well in English.

Why choose BEC?

To BEC, curiosity is essential, and at BEC you will join a community of helpful, ambitious, and tech-savvy people, who love to explore and grow. BEC ensures secure and stable bank solutions and ensures that banks can comply with the legislation such as reporting requirements, providing solutions for individual banks as well as the entire community of BEC banks. BEC learns and grows professional together, collaborating and exchanging feedback with colleagues and investing in training, seminars and conferences as needed to succeed.

Contact information

Ready to join a culture of security and tech-loving people? For more information, you are welcome to contact Search Consultant Mads Blauenfeldt at ph. +45 53665453. Hudson Nordic is the agency supporting BEC in this strategically important hire.

To apply, please click on the link “ansøg” in the top left corner. We look forward to receiving your application.

BEC is committed to hiring top talent regardless of race, religion, colour, national origin, sexual orientation, gender identity, and age. As a result, BEC encourages all qualified candidates to apply for the position.