Investments - TISO_Cosmos

Job Description:

Our Investments - Regulatory Reporting team at Deutsche Bank - Private Bank (TDI) develops and maintains applications for Transaction Reporting (MiFID) and Position Reporting. Regulatory Reporting changes are generally announced on short notice. Quality and stability has priority together with time to market.

By working in an Agile DevOps model, acting as a pilot for Investments and actively improving the model, we achieve very high quality while continuously delivering value to our clients. Located in Germany and India, we work closely together using agile and virtual collaboration techniques and our team’s diversity to reach our goals of continuous deployment, process improvement and internalizing engineering know how.

As a Technical Information Security Officer (TISO) you will be responsible for managing IT security aspects of IT applications in our landscape and act as primary contact and subject matter expert for all application related information security topics in the context of Deutsche Bank’s digitalization journey.

As part of our flexible scheme, here are just some of the benefits that you’ll enjoy

• Flexible working arrangements
• Gender neutral parental leaves
• 100% reimbursement under child care assistance benefit (gender neutral)
• Sponsorship for Industry relevant certifications and education
• Employee Assistance Program for you and your family members
• Comprehensive Hospitalization Insurance for you and your dependents
• Accident and Term life Insurance
• Complementary Health screening for 35 yrs. and above
• Best in class leave policy

• Your primary focus will be on managing the IT security roadmap of the applications (information security compliance) in terms of the three structural dimensions (confidentiality, integrity and availability) and ensure their compliance with Deutsche Bank IT policies
• You monitor and review security threads for the application and propose risk driven approach to counter such security threads; Define information security requirements and ensure that the development team will apply to it
• You validate and review information security relevant deliverables for all changes that relate to the applications, e.g. information security concept, security monitoring plan, access concept, etc. and validate availability of all necessary application/service knowledge and documentation.
• You participate in Subject Matter Expert meetings and in information security projects and work closely with the CSO teams, avoiding any delays or escalations related to non-compliance.

• Above 9 years experience in a in a similar role or a commercial, mathematical or IT training above 9 years experience in the areas of "information security" or "risk management"

• Strong analytical skills for risk assessment and process control and knowledge of risk related frameworks (COBIT, ISO 27K); Hands-on ITIL experience or relevant IT security certifications is a plus.
• Good technical IT security knowledge (understanding of risks, threads, vulnerabilities, security policies, etc.) including relevant tactics, techniques and processes, common attack scenarios
• Good knowledge of infrastructure technologies including security technologies, network infrastructure, network security, operating systems, databases, applications, and the respective security settings;
• Ability to understand operational processes from an information security perspective (end to end)
• Experience in working together with Agile/SCRUM teams and their methods and tooling.

• Pro-active team player with good communication and English language skills

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.