PB Information security specialist, AS
Job Description:
Job Title: PB Information security specialist, AS
Location:Mumbai, India
Role Description
Divisional Risk and Control is responsible for non-financial risk and control management for the relevant operating Division or Infrastructure function Central Control Unit for the bank. Work includes:
Defining the risk management framework
Developing process and procedures to report on, manage, and mitigate risks to acceptable levels
Maintaining operational control and discipline across the organizational unit Ensuring that business is conducted in accordance with applicable regulations and in adherence to the bank's internal policies
Providing thought-leadership around business specific risk taxonomies, assessment methodologies, process and control implementation
Developing, tailoring and testing the control infrastructure for the business Communicating regulatory development and implications to the business Executing certain risk-related processes and draft first like risk procedures (e.g. product reviews, issue capture, regulatory change management vendor management etc.)
Managing Risk and Compliance data and information for both first and second lines
Coordinating execution of risk and control self-assessment (RCSA) process Driving messaging and information from second line to first line (policies, procedures, training)
Providing a consolidated view of non-financial risks
Developing a positive risk culture, whilst assuring strategy alignment among various organizational levels
What we’ll offer you
As part of our flexible scheme, here are just some of the benefits that you’ll enjoy,
Best in class leave policy.
Gender neutral parental leaves
100% reimbursement under childcare assistance benefit (gender neutral)
Sponsorship for Industry relevant certifications and education
Employee Assistance Program for you and your family members
Comprehensive Hospitalization Insurance for you and your dependents
Accident and Term life Insurance
Complementary Health screening for 35 yrs. and above
Your key responsibilities
Responsible to ensure compliance with the Information Security Policy and the subordinate documents within area of responsibility
Establish and document roles/entitlements for each of the application together with the Role owners.
Ensure any changes to the roles are supported by documented valid justification/s along with an Impact and Risk assessment as part of business decisions
Execute IS Risk assessment and compliance evaluations for assigned IT assets with support from BSO community
Review and address quality issues within ISO scope of responsibilities
Ensure execution of Information Security risk management in line with DB Information Security Policy/Guidelines including 1) InfoSec controls 2) Mitigating Control weakness 3) End user access review and recertification 4) provide InfoSec advisory on vendor relationships 5) Support BCM/DR exercise from ISO perspective 6) Providing guidance on control implementation
Support Chief ISO delegate on relevant actions and initiatives.
Create Segregation of Duties (SoD) rules for IT, assess SoD Rule violations and make exception decisions
Participate in Information Security initiatives and programmes, as relevant;
Review and assess severity of information security breaches and recommend appropriate follow-up actions, where necessary
Advise local business and other partners on CSO solutions and facilitate service adoption in cooperation with Central CSO teams
Support in the review and assessment of data leakage incidents relevant to PB Booking Centre.
Your skills and experience
Education & Experience
Proven experience of working within Information Security / Information Technology environment ideally in Banking Environment
Experience working on small to medium scale projects at least within a global environment
Professional certification including ISO27001 - Lead Auditor/ Lead Implementer, CISM, CRISC
University degree
Competencies
Outstanding problem solving, analytical and project management skills
Proficiency with Microsoft Office programs; e.g. Excel, Word and PowerPoint
Ability to work in pressurised situations
Strong work ethic, commitment to excel and proven capacity to work effectively with minimum supervision
Strong communication (written and verbal) and relationship skills with excellent command of the English language
Very good influencing and management skills to liaise effectively with Business and control functions
Personal Characteristics
Proactive attitude and self-initiative
Ability to think laterally.
Strong Team Player skills as well as working independently
Eagerness to learn and adapt to new situations and processes
Delivery-focused, able to manage multiple deliverables to deadlines
Flexibility with respect to new tasks and the ability to work diligently in stressful situations
Ability to learn quickly
Driven and able to handle day-to-day routine as well as cope with shifting priorities and changing responsibilities to meet needs and demands
Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.
How we’ll support you
Training and development to help you excel in your career.
Coaching and support from experts in your team.
A culture of continuous learning to aid progression.
A range of flexible benefits that you can tailor to suit your needs.
About us and our teams
Please visit our company website for further information:
https://www.db.com/company/company.html
We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.
Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.
We welcome applications from all people and promote a positive, fair and inclusive work environment.