Lead Security Compliance Specialist T500-19585

About Deutsche Börse Group:

Headquartered in Frankfurt, Germany, Deutsche Börse Group is a leading international exchange organization and market infrastructure provider. They empower investors, financial institutions, and companies by facilitating access to global capital markets.

Their India center is located in Hyderabad, serves as a key strategic hub and comprises India's top-tier tech talent. They focus on crafting advanced IT solutions that elevate market infrastructure and services. Deutsche Börse Group in India is composed of a team of capital market engineers forming the backbone of financial markets worldwide.

Lead Security Compliance Specialist

Information Security is of very high priority for supporting DBG's business. The department Group Security uses the ISO 27000 framework and fulfils the relevant requirements for financial service providers. In this way it is possible to protect the information assets in terms of confidentiality, integrity, authenticity, and availability.

Your area of work:

The Information Security Compliance Specialist plays a critical role in ensuring our Security Teams and in turn our organization's adherence to security compliance requirements with internal and external stakeholders. This individual will action, implement and further improve a diverse set of topics as described below. Due to the nature of interacting with a variety of teams within the security department, compliance and regulatory functions as well as external stakeholders you will gain broad exposure to different areas of the business, contributing to a constantly evolving security landscape and enhancing your professional development. Responsibilities include:

- Coordinate and support the department on ongoing internal and external audits and findings remediation and perform regular reporting internally
- Support Security Management on tasks and issues related to security regulation and compliance, including Internal Control System (ICS) processes, risks and controls
- Manage and support in written-rules initiatives and reporting
- Provide input and feedback on security topics with our second Line of Defense (LoD)
- Consult, advice and coordinate between various stakeholders on security standards & information security regulatory matters
- Provide regular update on due-diligence questions and maintenance on our internal security services and capabilities
- Represent the organization in matters related to information security
- Involvement and consulting in projects around cloud security, DORA and ICS

Qualifications / Required skills

- Bachelor / Master's degree in information security or technology or equivalent
- Proven experience in information security policies and standards, regulatory compliance
- Experience with security audits and audit management ideally within the financial services industry
- Knowledge of relevant legal and regulatory frameworks in the financial industry (e.g., MaRisk BAIT, EU DORA, NIS 2, CSSF circulars) and industry standards (e.g. ISO 2700x, NIST, COBIT) is desired
- Understanding of internal control systems (ICS) and security compliance
- Minimum of 4 years' experience in Information Security with a focus on above
- Experience in structuring options and presenting these to senior management
- Proactive thinking and self-paced work on solutions
- Strong analytical skills, creativity, critical thinking, ability to identify problems and propose solutions
- Excellent presentation and interpersonal skills
- Fluent in English.
- Good to have: CISSP, CISM and any technical training.

---