PMO Risk Reduction and Service Owner for Key Vendors

Job Title: PMO Risk Reduction and Service Owner for Key Vendors

Corporate Title: Vice President

Location: Bangalore, India

Role Description

• The Project Manager – Risk reduction is responsible for leading risk and audit remediation initiatives for Hybrid Cloud Infrastructure division. This includes managing end to end  delivery of risk mitigation plans, ensuring timely closure of audit findings and strengthening control environments. Strong project management, stakeholder engagement and risk oversight are key success to the role.
• The Service Owner (SO) is responsible for managing the entire lifecycle of third-party relationships within the organization. This role involves ensuring that all risk assessment tasks and activities are completed accurately and in a timely manner, overseeing the selection and screening of third parties, and ensuring compliance with regulatory requirements. The SO will work closely with various stakeholders to mitigate risks, manage subcontractors, and ensure continuous risk monitoring. 

What we'll offer you

As part of our flexible scheme, here are just some of the benefits that you'll enjoy,

• Best in class leave policy.
• Gender neutral parental leaves
• 100% reimbursement under childcare assistance benefit (gender neutral)
• Sponsorship for Industry relevant certifications and education
• Employee Assistance Program for you and your family members
• Comprehensive Hospitalization Insurance for you and your dependents
• Accident and Term life Insurance
• Complementary Health screening for 35 yrs. and above

Your key responsibilities

Project Manager – Risk Reduction :

• Promote risk awareness, encourage prioritization of risk remediation, process re-engineering and strategic risk management
• Provide processes for systematic, proactive, and forward-looking risk identification, risk assessment, monitoring, reporting and keeping GTI risk profile up to date
• Plan and execute thematic risk assessments and input into risk scenario testing and macro threat assessments
• Identify material remediation priorities for GTI and key cross divisional priorities impacting GTI (control / remediation book of work)
• Track project status, maintain action logs, and ensure documentation
• Be a catalyst and an enabler to the global leadership for achieving the objectives in line with changing regulatory and industry operating landscape and reducing risk against overall technology operations portfolio
• Ensure management transparency by way of timely risk reporting and proactive engagement and representing controls team at different governing forums
• Ensure alignment with internal risk frameworks and regulatory expectations.

Service Owner

• Risk Assessment and Management: Complete risk assessments, ensure proper screening, and report third-party issues.
• Regulatory Compliance: Nominate Local Service Owners and ensure compliance with local regulatory requirements.
• Third-Party Selection and Screening: Select third parties, consider risk aspects, and review screening outputs.
• Control Assessments and Mitigation: Ensure third parties complete required tasks, develop continuity plans, and manage risk mitigation actions.
• Continuous Monitoring and Termination: Update risk assessments, perform post go-live controls, and execute termination strategies.
• Contracting and Payment: Complete risk assessments before service commencement, ensure contractual clauses are included, and execute risk process activities for contract renewals or amendments.

Stakeholder Management – Identify, Partner, and Collaborate

• Establish relationship with external and internal Audit teams to ensure effective and robust challenge to finding and to establish smart management action plans.
• Partner with 2nd LoD functions within the bank to ensure alignment towards Group wide minimum control standards
• Collaborate closely and proactively with Divisional Control teams and Embedded Risk teams to manage the audit finding lifecycle
• Promote and support proactive IT/IS risk culture at the Bank

Your skills and experience

• Overall experience in similar roles for 5-8 years in a global Bank withing Technology division or IT/IS audit
• Minimum 5 years of experience within Risk and Control domain steering technology risk framework / control implementation in a global organization
• Proven experience in Project management in Risk related programs, including managing vendor governance in a global organization
• Good understanding of Industry best practices such as NIST, COBIT, ITIL and ISO 27001 etc
• Deeper understanding of industry wide risk landscape and regulatory expectations
• Cloud Computing Technology (GCP, AWS, Azure etc.) certifications or similar domains
• Other professional qualifications and certifications in Technology risk management

How we'll support you

• Training and development to help you excel in your career.
• Coaching and support from experts in your team.
• A culture of continuous learning to aid progression.
• A range of flexible benefits that you can tailor to suit your needs.

About us and our teams

Please visit our company website for further information:

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.