Passionate about InfoSec?

About Nord Pool:

At Nord Pool we are building the next generation of systems to trade power across Europe. We want to delight our customers with fantastic user experiences, services, and a platform that exceeds their expectations.

We deliver societally critical systems that play an essential role in facilitating fair and efficient power markets across Europe. Through these systems and their offering, Nord Pool also plays a key role of enabling the acceleration towards green and clean energy production and consumption.

You will get to leave your mark and make a real difference on our products and way of working. You will be part of a motivated, tech-savvy, and friendly team. We believe in giving you the freedom to deliver your best work: that is why we are flexible around hours, tools and working methods. With us, you can build your career at an international, forward-thinking, and profitable company. We will give you opportunities to learn and create something new.

Nord Pool is a part of the Euronext group, a pan-European exchange group offering a diverse range of products and services and combining transparent and efficient equity, fixed income securities and derivatives markets in Amsterdam, Brussels, Dublin, Lisbon, Milan, Oslo, and Paris.

Job description:

We are seeking a new Head of Security that will be responsible for advancing the cyber security of Nord Pool’s technology infrastructure. You will be a strategic leader to enhance all aspects of the cyber security program, with an emphasis on the controls protecting our network, server, endpoint, and remote workforce, and lead enterprise cyber risk discussion with business and technology leaders, as well as working hands-on in the security tools.

The role has dual reporting lines, within Nord Pool the Head of Security reports to the Chief Information Officer (CIO), while in the Euronext Group the role reports to the group Chief Information Security Officer (CISO).

Essential Duties and Responsibilities

• The Head of Security is responsible for maintaining a company-wide vision, strategy, and architecture for information security. This includes establishing, maintaining, and monitoring the policies and procedures that promote the secure and uninterrupted operation of all information technology systems, ensuring that the company is in compliance with all applicable laws, directives, and policies.
• Design and implement the security architecture solutions using the security tools.
• Conduct security assessments, threat modeling, and risk analysis to identify potential security vulnerabilities and prioritize appropriate mitigations and investments.
• Collaborate with cross-functional teams to integrate security controls into the organization's infrastructure and applications.
• Participate in incident response activities, including investigation, containment, and remediation of security incidents.
• Develop and deliver executive level presentations to management, and applicable regulatory and rating agencies.
• Stay abreast of the latest security trends, threats, and technologies to continuously enhance the organization's security posture.

Knowledge, Skills and Experience Required

• Advanced to expert level knowledge and understanding of information security architecture, information security technologies, systems design, integration of systems, and networking, with Hands-on experience implementing and configuring the security tools.
• Strong understanding of cloud security principles and best practices.
• Strong process improvement orientation.
• Effective communication skills with the ability to articulate technical concepts to non-technical stakeholders including Customer Service/Experience, Operations, Finance, and HR.
• Seasoned judgment for working independently and taking initiative.