IT Security and GDPR Officer

Specialist for a central role

We are seeking an IT security and GDPR responsible for Middle Office, who will take a central role in the bank's work with information security, cyber risks, and data protection with particular focus on GDPR, DORA and contract management.

In the IT security area you will, in collaboration with the bank's data center Bankdata, among other things support the work with DORA, ICT risk management, supplier management, incidents, emergency preparedness and ongoing controls. In the GDPR area you will help raise the daily management and further develop the bank's documentation, risk assessments, processes and controls.

Your primary tasks consist of

• maintain and further develop the bank's work with information and IT security, GDPR and DORA and support supplier and contract management, including ICT contracts, risk assessments, deadlines and follow-up
• build and implement the bank's GDPR module in RISMA and move and structure existing GDPR processes, risks and controls in the new system
• coordinate and follow up on activities related to DORA, NIS2 and other regulatory requirements in the IT security area
• contribute to developing and maintaining controls including access control, vendor monitoring, incidents and other significant IT security risks
• perform controls and follow up on identified deviations
• advise and brainstorm with colleagues across the bank
• contribute to risk assessments and documentation of IT-related risks, controls and follow-up
• contribute to awareness activities and strengthen the bank's security and data protection culture
• contribute with reporting and material to management, audit and supervision.

Employee in a strong and value-based local bank

You will be offered an exciting job where you have ample opportunity to develop professionally and personally. You will get a versatile position with a great potential to shape the bank's future work with IT security, GDPR, DORA and contract management. The role combines system implementation, risk understanding, professional development, advisory work and concrete control tasks across several areas.

Risk Manager Julie Kiil states “You will primarily focus on your own areas, but will continuously collaborate and brainstorm with relevant professionals across the bank – among others in IT, the Secretariat to the Board and your closest colleagues in Middle Office. In the Middle Office we have an informal tone, open dialogue and we look forward to welcoming you and ensuring that you receive a good introduction to the bank's organization, systems and processes.”

You will become part of a team of 7 skilled colleagues including yourself in Middle Office. The department is the bank's hub for control activities across different areas and supports overview, consistency and compliance with regulatory requirements.

Your primary workplace is the bank's main office in Grenaa, which gives you plenty of opportunities to have a wide network within the bank - as well as a close and good collaboration with colleagues in other staff functions. But there is also flexibility to sometimes work from home and/or from other of the bank's locations by agreement with your manager.

At Djurslands Bank our values are the foundation of everything we do. We work with integrity at the center, are engaged and proactive in our work, prioritize well-being and development, and we are proud to be a local bank that takes responsibility for both customers and society. Here there are flexible terms and short decision-making paths.

As a new employee you will be an important part of this community – and we promise you security, flexibility, development opportunities and good leadership.

We offer attractive employment terms with a range of employee benefits. We have a 37-hour work week, 6 weeks of vacation and 5 caregiving days per year as well as flexitime.

Your profile

We imagine that you have a relevant education in e.g. information security, law, professional law, IT, compliance or auditing and preferably with experience in one or more of the role's areas. It is an advantage if you have experience from the financial sector or other regulated companies.

We expect that you have practical experience with IT security, GDPR, DORA and NIS2, and that you have an understanding of the relationship between IT and information security, data protection, business risks and operational risks.

Additionally we emphasize that you

• work in a structured way and create overview of documentation, tasks and deadlines
• have interest in systems, processes, risk assessments and controls and be open to working on control tasks in other areas
• can translate regulatory requirements into practical solutions and measurable controls
• take responsibility, follow up and ensure your tasks and action plans are carried out
• will both work on the practical execution of tasks and as an overall subject matter expert
• communicate clearly and thrive with a broad range of contacts.

You don't need to be an expert in all areas from day one. The most important is that you have a solid professional foundation, interest in both GDPR and IT security, and a desire to develop yourself and take part in new control areas.

Interested?

You can hear more about the position by contacting Risk Manager Julie Kiil at phone 8630 3132 or PA and Secretariat Director Jacob Hoelgaard at phone 2942 5741.

We look forward to receiving your application – which will of course be treated confidentially – as soon as possible.

We hold interviews on an ongoing basis and fill the position when we have found the right candidate.