Investments - TISO_Cosmos

Description

:

Job Title: Technical Information Security Officer (TISO)TDI- Private Bank-Products & Enterprises InvestmentsLocation: Pune, India

Role descriptionOur Investments - Regulatory Reporting team at Deutsche Bank - Private Bank (TDI) develops and maintains applications for Transaction Reporting (MiFID) and Position Reporting. Regulatory Reporting changes are generally announced on short notice. Quality and stability has priority together with time to market.By working in an Agile DevOps model, acting as a pilot for Investments and actively improving the model, we achieve very high quality while continuously delivering value to our clients. Located in Germany and India, we work closely together using agile and virtual collaboration techniques and our team’s diversity to reach our goals of continuous deployment, process improvement and internalizing engineering know how.As a Technical Information Security Officer (TISO) you will be responsible for managing IT security aspects of IT applications in our landscape and act as primary contact and subject matter expert for all application related information security topics in the context of Deutsche Bank’s digitalization journey.What we will offer youAs part of our flexible scheme, here are just some of the benefits that you’ll enjoyFlexible working arrangementsGender neutral parental leaves100% reimbursement under child care assistance benefit (gender neutral)Sponsorship for Industry relevant certifications and educationEmployee Assistance Program for you and your family membersComprehensive Hospitalization Insurance for you and your dependentsAccident and Term life InsuranceComplementary Health screening for 35 yrs. and aboveBest in class leave policyYour Key responsibilitiesYour primary focus will be on managing the IT security roadmap of the applications (information security compliance) in terms of the three structural dimensions (confidentiality, integrity and availability) and ensure their compliance with Deutsche Bank IT policiesYou monitor and review security threads for the application and propose risk driven approach to counter such security threads; Define information security requirements and ensure that the development team will apply to itYou validate and review information security relevant deliverables for all changes that relate to the applications, e.g. information security concept, security monitoring plan, access concept, etc. and validate availability of all necessary application/service knowledge and documentation.You participate in Subject Matter Expert meetings and in information security projects and work closely with the CSO teams, avoiding any delays or escalations related to non-compliance.Your skills and ExperiencesAbove 9 years experience in a in a

similar role

or a commercial, mathematical or IT training

above 9 years

experience in the areas of "information security" or "risk management"Strong

analytical

skills for risk assessment and process control and

knowledge of risk related frameworks

(COBIT, ISO 27K); Hands-on ITIL experience or relevant IT security certifications is a plus.Good

technical IT security knowledge

(understanding of risks, threads, vulnerabilities, security policies, etc.) including relevant tactics, techniques and processes, common attack scenariosGood knowledge of

infrastructure technologies

including security technologies, network infrastructure, network security, operating systems, databases, applications, and the respective security settings;Ability to understand

operational processes

from an information security perspective (end to end)Experience in working together with

Agile/SCRUM

teams and their methods and tooling.Pro-active team player

with good

communication and English

language skillsHow we’ll support youTraining and development to help you excel in your careerCoaching and support from experts in your teamA culture of continuous learning to aid progressionA range of flexible benefits that you can tailor to suit your needs

---