Assistant Vice President, Deutsche Bank

• Bachelor’s degree in computer science, Mathematics, Engineering, or a related field, or equivalent deep expertise in information security; professional certifications such as CISA, CISSP, CISM, or CRISC; familiarity with ITIL 4, COBIT5, or ISO 27001 is a plus
• Experience in project or process/quality management, with solid knowledge of auditing IT application controls (e.g., through IT audits or IT risk management)
• Deep understanding of how IT and Information Security risks relate to business process risks, especially in regulated financial institutions
• Hands-on technical experience in IT operations plus expertise in at least one area: cybersecurity, infrastructure, SDLC, cloud engineering, or similar; familiarity with ITIL 4, COBIT5, or ISO 27001 is a plus

Desirable

• The Controls Testing & Assurance (CT&A) department is a global function of Deutsche Bank, focusing on Compliance, Financial Crime, Operational Risk Management (ORM), and related regulatory requirements
• CT&A provides feedback on the effectiveness of controls across the Bank’s business areas and control functions
• Within CT&A, the ORM Information Technology (IT) & Information Security (IS) Testing Team conducts “check and challenge” Risk Oversight Reviews, assessing the design and operating effectiveness of IT and IS risk controls, processes, and frameworks
• The ORM IT & IS Team is a global function with team members based in India, Germany, and the USA, and some travel may be required
• Support planning and execution of ORM IT & Information Security (IS) risk oversight testing projects across all areas of CT&A under the direction of the ORM IT&IS Team Lead
• Evaluate technology control testing in accordance with regulatory standards, internal firm policies, and industry best practices
• Partner with the ORM IT & IS Team Lead and CT&A stakeholders to create a review work plan based on annual risk assessment findings
• Assess IT and Information Security operational risks, identify root causes, implement remediation plans, and escalate critical issues or exceptions to senior management for review and follow-up
• Support the preparation of reports to senior management detailing review findings and recommendations, report periodically on major activities completed and planned for the upcoming period, ensure all findings and recommendations are recorded in CT&A’s issue tracker, and follow up on open issues to ensure proper resolution
• Develop and maintain strong relationships with key stakeholders, including the Technology Testing Team, CT&A (e.g., business testing teams), Compliance, AFC, Business Divisional Control Officers, the Technology, Data and Innovation Group (TDI), and Group Audit