Description
As a leading global Investment Bank based in Europe, Deutsche Bank supports institutional and corporate clients as they navigate through rapidly evolving and increasingly volatile markets. The Investment Bank has a comprehensive global offering, providing clients with fixed income and currencies risk management and liquidity provision, leading financing capabilities, and a full suite of origination and advisory services.
Deutsche Bank is one of the few banks with the scale and network to compete aggressively in this space, and the breadth of investment in this area is unmatched by our peers. Joining the team is a unique opportunity to help rebuild the core of some of our most mission critical processing systems from the ground-up
Our Investment Bank Technology team is a global team of Engineers (and growing!) across 30 countries. The primary businesses that we support within Investment Bank are Fixed Income and Currencies, Origination & Advisory Services and Deutsche Bank Research. Investment Bank Technology support these businesses through CIO aligned teams and also by 'horizontals' such as Client Connectivity, Surveillance and Regulatory, Infrastructure, Architecture, Production and Risk & Control.
We are looking for a hybrid Technology specialist to join our Risk and Control team to be responsible for a hybrid role spanning Information Technology and Information Security related Audit Management scope. This involves in summary, Hands-on technical data analysis and control process improvement, Control effectiveness testing, Control Uplift remediations activities and overall ensuring technology and security controls are implemented effectively and sustainably.
The Risk and Control Team ensures the Bank's information control priorities are effectively implemented across Investment Bank and Corporate Bank Technology as shared team. The team offers dedicated support for each Chief Information Officer (CIO) business line, advisory services for control responses, and program management services for broad control uplifts. The team's mission is to reduce the organization's technology risk exposure by implementing key bank controls, ensuring appropriate and timely resolution of audit issues, and participating in the Bank's design of control implementations. Therefore, your role would be integral in supporting the front-line management in identifying, assessing / measuring risks, identifying remediation actions, and monitoring risks.
What we’ll offer you
As part of our flexible scheme, here are just some of the benefits that you’ll enjoy
- Best in class leave policy
- Gender neutral parental leaves
- 100% reimbursement under childcare assistance benefit (gender neutral)
- Sponsorship for Industry relevant certifications and education
- Employee Assistance Program for you and your family members
- Comprehensive Hospitalization Insurance for you and your dependents
- Accident and Term life Insurance
- Complementary Health screening for 35 yrs. and above
Your key responsibilities
At Risk & Control Governance team, you will be responsible for hybrid of activities involving Information Technology and Information Security controls and will partner with CIO teams and Risk Leads to ensure overall risk posture for the area is improved. Able to liaise with Risk leads, senior stakeholders and technology / process owners on reporting, technical data analysis, process improvements and tracking of key deliverables for control uplifts and ensuring operational effectiveness of controls are tested and reported. To be successful in this role the below are key responsibility areas
Control Operational effectiveness testing : sample based testing for specific risk patternsReporting and Control data analysis : Will be responsible for internal and external data source effectiveness by analysing data gaps related to control uplifts, emerging pattens of compliance deterioration by technology, remediation responsibilitiesRegulatory and Audit management support : Provide analysis and supporting evidence review to improve quality of audit evidence submission for critical audit response / closureInformation Technology Data Quality board findings remediation within the area and any non-compliance is tracked to remediationRisk Advisory : Provide assistance to application teams on Information Technology and Information Security control implementation requirements. Drive proactive risk culture within the organization.Control Uplift Remediation : Ensures Information Technology and Information Security risk remediation programs are initiated and executed in line with Deutsche Bank Risk and Program standards. Also will work with policy owners and control owners to improve processes and tooling.Work with the control teams to identify and resolve potential issues in Information Technology and Security control design. Identify and resolve implementation issues. Suggest effectiveness metrics, ensure control design includes proper evidence, and provide input to the design and effectiveness of centrally provided tooling.Your skills and experience
Must have experience with hands-on data analysis and data problem solving using reporting tools such as SAP BO as most data sources will require this expertiseMust have excellent knowledge on Audits process and experience supporting it or Audit related Certification preferredMust have excellent technical knowledge on Information Technologies and SDLC process such as end to end technology delivery knowledge e.g. Python, Ansible, CI / CD pipelines, automation of process etc.Extensive knowledge of, and hands-on experience with, concepts, including, but not limited to, IT infrastructure knowledge such Networks / Cloud computing / Servers and related tools such as configuration management databasesAdvanced level data analysis and reporting skills using industry standard tools including but not limited to excel, tableau or similarDemonstrable familiarity with concepts of Technology Roadmap Compliance, Patching lifecycle knowledge especially Java, Oracle, Disaster Recovery planning and testingGood familiarity in conducting Control effectiveness testing based on specific risk patternsGood familiarity with general Patching concepts and challenges in critical technologies (Java, Oracle, UNIX, etc.), PVG process and CVE advisory process for vulnerabilitiesAdvanced verbal and written communication skills to present ideas and concepts effectivelyDesirable experience providing support for external regulatory examinations or auditsMinimum 10+ years of experience within Information Technology related rolesDesirable experience in assessing risk, writing issues, and developing appropriate corrective actionsDesirable experience in generating regular compliance reports and presentationDesirable experience in automating manual tasks or improving data collection to reporting processesHow we’ll support you
Training and development to help you excel in your careerCoaching and support from experts in your teamA culture of continuous learning to aid progressionA range of flexible benefits that you can tailor to suit your needs