M365 AI Governance & Risk Lead (Expert/Technology Lead)

Job ID: 5930

Welcome to Group Technology, where we pride ourselves on engineering solutions and direct Nordea’s transformation by providing a holistic technological view and structured understanding of the bank, and its surrounding environment to enable the Customer Vision and the Business Strategy.

We are looking for a M365 AI Governance & Risk Lead to join our team Content Management in End User Engineering & Operations service domain. In this role, you will act as a Technology Service Lead for M365 AI and agentic AI governance capabilities and related platform controls. While the primary focus is on Microsoft 365 AI capabilities, the role will also need to understand how other enterprise AI platforms, such as Gemini or Claude, may interact with Nordea’s broader AI governance landscape, risk framework and control requirements. You will take ownership of the service from a maintenance, operations, risk and lifecycle perspective, ensuring that AI enablement, governance and related AI capabilities are delivered within agreed quality, budget, risk appetite and strategic roadmap. The role is the initial point of contact for business and technology stakeholders on governance, risk, compliance and operational control topics related to agentic AI and Microsoft 365 AI capabilities.

Nordea is a place where traditions meet tomorrow. We're not just a bank, we're a tech employer on a mission to evolve finance securely and responsibly. Together, we impact millions of people’s daily lives by ensuring they can access our solutions anytime, anywhere, while safeguarding their personal data and wealth. Join us in making an impact on the banking industry.

About our team

Content Management in End User Engineering & Operations provides modern digital workplace services across Nordea. We are responsible for governance, compliance processes, platform enablement and operations related to Microsoft 365 services and supporting platforms. Our technology stack is broad and includes Microsoft 365 Copilot, agentic AI governance capabilities, integrations and custom applications for digital workplace. We add value by enabling Executives, Business, IT, Traders and Branches with dependable end-user services required for their daily work.

Our team is international, with colleagues based in Denmark, Finland and Poland. Your future manager is located in Warsaw.

Main responsibilities in this role: 

• Define and maintain the Microsoft 365 AI and agentic AI governance model
• Establish rules for allowed, conditional and prohibited use cases for Copilot Agents, Co-work and related Microsoft 365 AI capabilities.
• Maintain governance requirements for agents published or shared in the tenant
• Ensure new and changed AI capabilities are risk assessed in coordination with data privacy, compliance, legal, Group AI and security departments.
• Ensure AI enablement follows data protection and security, auditability and regulated-environment requirements.
• Define evidence requirements for risk reviews, audits, management reporting and control validation.
• Translate internal policies, regulatory expectations and risk decisions into practical controls, guidance and operating procedures.
• Work closely with platform architecture and operations roles to ensure governance is technically enforceable and embedded into day-to-day platform operations.
• Own the service lifecycle for Microsoft 365 AI governance & agentic AI capabilities, including portfolio rationalization, capacity, configuration, performance, availability and lifecycle roadmap alignment.
• Ensure the service operates according to agreed budgets, KPIs, service levels and managed service expectations, including follow-up on operational quality and service performance.
• Initiate and drive continuous improvement, cost optimization and total cost of ownership considerations for the Microsoft 365 AI governance service and related controls.
• Ensure required improvements, risk mitigations, compliance actions and audit findings are prioritized in relevant backlogs and followed through to closure.
• Drive alignment and collaboration with Business Area Technology Leads, application owners, business service owners, execution leads, key business stakeholders and IT stakeholders to manage priorities, escalations and impediments.

Who you are

This is the right role for you if you are structured, risk-aware and comfortable working at the intersection of technology service ownership, governance and stakeholder management. You can independently translate complex compliance, audit, regulatory and AI governance expectations into practical controls, service requirements and operating procedures that enable business value while protecting Nordea, our customers and our data.

Your background and skills include: 

• Strong experience in governance, risk management, compliance, audit, information security or technology risk.
• Good understanding of Microsoft 365, including other Microsoft agentic AI platforms, collaboration platforms, data protection and enterprise controls.
• Awareness of broader enterprise AI platforms such as Gemini, Claude or similar GenAI solutions, and ability to assess their governance, risk and compliance implications in comparison with Microsoft 365 AI capabilities.
• Experience coordinating cross-functional reviews with security, privacy, compliance, legal and business stakeholders.
• Ability to write clear policies, operating models, decision papers, control descriptions and management-ready summaries.
• Understanding of GDPR, EU AI Act, information classification, DLP and risk management in a regulated environment.
• Strong facilitation, communication and stakeholder management skills in English.

It would be ideal if you also: 

• Have experience with Microsoft Purview, audit logs, sensitivity labels, DLP or compliance tooling.
• Have experience with AI governance, Responsible AI, GenAI risk or model risk assessments.
• Are familiar with Copilot Studio, Power Platform governance, Microsoft 365 Copilot.
• Have experience from banking, financial services or another regulated enterprise environment.
• Have experience with Jira, Confluence, ServiceNow

This role is open in Łódź, Warsaw and Helsinki. We work in a hybrid model, combining office collaboration with flexible remote work.

What we offer

Collaboration. Ownership. Passion. Courage. These are the values that guide us in how we work and how we make decisions – and that we imagine you share with us.

People are driven by many different factors. For some, it’s to take their career to the next level. For others, it’s to break new ground within their area of expertise – in other words, with us, you will always move forward.

A culture that fosters performance and growth in one of the largest Nordic banks, offering various opportunities to evolve, develop and learn from brilliant colleagues with diverse backgrounds in a vibrant working environment.

Hybrid working model – we believe in the value of bringing people together and at the same time we embrace the freedom of flexibility.

Diversity and inclusion are a natural part of our daily work. We know that an inclusive workplace is a sustainable one. We genuinely believe that our diverse backgrounds, experiences, characteristics and traits make us stronger together. Every day we strive to find new ways to improve diversity and inclusion within our community e.g. we have signed the European Diversity Charters in the countries where we operate to show our commitment and engage with others to continue learning and improving.

If this sounds like you, get in touch!

Next steps

​Submit your application no later than 15/09/2026. Please note that we will proceed with potential candidates already during the application period.

 The recruitment process consists of the following steps:

• Preliminary CV selection
• Phone conversation with the recruiter
• Online interview with the hiring leader
• Background check

We enable dreams and aspirations for a greater good.

We build relationships. We add a personal touch to everything we do – when advising our customers, collaborating with colleagues, and meeting our potential candidates.

We learn and develop. We take pride in being experts and thinking ahead. We use our expertise to meet our customers’ needs, from the simplest to the most complex. We bring a growth mindset to our work that enables us to focus on a broader perspective in our daily challenges.

We lead change. We are responsible and aware of the impact of our decisions, both for our customers and for our local and global communities. Mindful of our responsibility towards current and future generations, we have made sustainability an integrated part of our business strategy.

We are Nordea. We have a 200-year history of supporting and growing the Nordic economies and our values are deeply rooted in these open, progressive and collaborative societies. As one of the biggest employers in the Nordics, Poland and Estonia, you have excellent opportunities to evolve, develop and move forward with us.

Studies show that members of underrepresented communities don’t apply for jobs unless they tick all the qualification boxes. If this is part of why you hesitate to apply, we would like you to reconsider and give it a chance. Maybe your profile fits our needs much better than you think.

Only for candidates in Finland: A security clearance will be performed for the person selected for this position.

Only for candidates in Poland: Please include permit for processing personal data in CV as following:

In accordance with art. 6 (1) a and b. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) hereinafter ‘GDPR’. I agree to have: my personal data, education and employment history proceeded for the purposes of current and future recruitment processes in Nordea Bank Abp.

The administrator of your personal data is: Nordea Bank Abp operating in Poland through its Branch, address: Aleja Edwarda Rydza Śmiglego 20, 93-281 Łodź. Your personal data will be processed for the recruitment processes in Nordea Bank Abp. You have a right to access your personal data, right to rectify and right to delete. Disclosing the personal data in the scope specified by the provisions of Polish Labour Code from 26 June 1974 and executive acts are mandatory. Providing personal data is necessary to conduct the recruitment processes. The request for the deletion of your personal data means resignation from further participation in recruitment processes and causes the immediate removal of your application. Detailed information concerning processing of your personal data can be found at: https://www.nordea.com/en/doc/nordea-privacy-policy-for-applicants.pdf

We reserve the right to reply only to selected applications.