CUSO Risk Management Lead / Director, Deutsche Bank

• Experience in similar roles in a Financial Services within the Technology division or IT audit
• Experience as Risk and Control Lead in designing and implementation of Technology risk frameworks in a global organization and in a SOX organization
• Strong understanding of Industry best practices such as NIST, COBIT and ISO 27001
• Knowledge of Agile change delivery methodology, DevOps and Shift left concepts
• Cloud Computing Technology (GCP, AWS, Azure etc.) certifications or similar domains

Desirable

• The role is to oversee and enhance the Technology, Data and Innovation (TDI risk management strategy specifically for the legal entities ensuring compliance with Regulatory requirements, and alignment with global standards
• Divisional Risk and Control is responsible for non-financial risk and control management for the 1st line of defense
• Defining & executing the risk management strategy
• Developing process and procedures to report on, manage, and mitigate risks to acceptable levels
• Maintaining operational control and discipline across the organizational unit
• Ensuring that business is conducted in accordance with applicable laws, regulations and in adherence to the bank's internal policies
• Providing thought-leadership around business specific risk taxonomies, assessment methodologies, process and control implementation
• Communicating regulatory development and implications to the business
• Executing certain risk-related processes and draft first like risk procedures (e.g. product reviews, issue capture, regulatory change management, vendor management etc.)
• Participating in risk & control assessment (RCA) process
• Developing a positive risk culture, whilst assuring strategy alignment among various organizational levels
• Manage regulatory engagements for the legal entity (Americas)
• Partner with 2nd line risk and compliance and 3rd line Group audit on ensuring IT risks are within risk appetite
• Developing risk strategies with a specific view to support the legal entity
• Act as primary contact for all Regulatory and Internal CUSO board requirements and inquiries including preparing and maintaining status, supporting Head of TDI Americas
• Monitor Risks, remediations, findings and understanding legal entity risk
• Main TDI representative for US resolution planning
• Create a governance and oversight model including preparing materials for Risk and Board committee meetings
• Collaborate with stakeholders globally to ensure meeting global standards, and consistency on communication to global regulators
• Identify emerging risks
• Partner and clear communications with GTI and TDI regulatory teams, IRC, 2nd line Risk, and Group Audit
• Managing and setting agenda for the US Technology Executive Committee
• Promoting a culture of Risk awareness by improving our Self-identification process to incentivize our employees to raise issues proactively
• The 1st line Risk and Control function supports Technology, Data and Innovation (TDI) and Group Technology Infrastructure (GTI) for Deutsche Bank Group. GTI is responsible for providing the infrastructure, platforms, tools, and services that business-aligned Information Technology (IT) divisions consume and rely on for technology operations
• As part of the team, you will join the Bank’s journey and contribute towards our strategic goal of cloud enabled solutions as well as activities that improve our operational resilience and risk reduction
• You will build the GTI Risk governance capability. The team will work in partnership to effectively govern risk management activities and represent at various risk forums. They will work closely with 2nd line to ensure alignment to overall technology risk appetite, translate risk appetite to technology control areas, and agree tolerance levels for relevant Risk Types