Lead Security Compliance Specialist

About Deutsche Börse Group

Headquartered in Frankfurt, Germany, we are a leading international exchange organization and market infrastructure provider. We empower investors, financial institutions, and companies by facilitating access to global capital markets. Our business areas cover the entire financial market transaction process chain, including trading, clearing, settlement and custody, digital assets and crypto, market analytics, and advanced electronic systems. As a technology-driven company, we develop and operate cutting-edge IT solutions globally.

About Deutsche Börse Group in India

Our presence in Hyderabad serves as a key strategic hub, comprising India's top-tier tech talent. We focus on crafting advanced IT solutions that elevate market infrastructure and services. Together with our colleagues from across the globe, we are a team of highly skilled capital market engineers forming the backbone of financial markets worldwide. We harness the power of innovation in leading technology to create trust in the markets of today and tomorrow.

Lead Security Compliance Specialist

Information Security is of very high priority for supporting DBG's business. The department Group Security uses the ISO 27000 framework and fulfils the relevant requirements for financial service providers. In this way it is possible to protect the information assets in terms of confidentiality, integrity, authenticity, and availability.

Your area of work:

The Information Security Compliance Specialist plays a critical role in ensuring our Security Teams and in turn our organization's adherence to security compliance requirements with internal and external stakeholders. This individual will action, implement and further improve a diverse set of topics as described below. Due to the nature of interacting with a variety of teams within the security department, compliance and regulatory functions as well as external stakeholders you will gain broad exposure to different areas of the business, contributing to a constantly evolving security landscape and enhancing your professional development. Responsibilities include:

• Coordinate and support the department on ongoing internal and external audits and findings remediation and perform regular reporting internally
• Support Security Management on tasks and issues related to security regulation and compliance, including Internal Control System (ICS) processes, risks and controls
• Manage and support in written-rules initiatives and reporting
• Provide input and feedback on security topics with our second Line of Defense (LoD)
• Consult, advice and coordinate between various stakeholders on security standards & information security regulatory matters
• Provide regular update on due-diligence questions and maintenance on our internal security services and capabilities
• Represent the organization in matters related to information security
• Involvement and consulting in projects around cloud security, DORA and ICS.

Qualifications/required skills:

• Bachelor/Master degree in Information Security or Technology or equivalent
• Proven experience in information security policies and standards, regulatory compliance
• Experience with security audits and audit management ideally within the financial services industry
• Knowledge of relevant legal and regulatory frameworks in the financial industry (e.g., MaRisk BAIT, EU DORA, NIS 2, CSSF circulars) and industry standards (e.g. ISO 2700x, NIST, COBIT) is desired
• Understanding of internal control systems (ICS) and security compliance
• Minimum of 4 years' experience in Information Security with a focus on above
• Experience in structuring options and presenting these to senior management
• Proactive thinking and self-paced work on solutions
• Strong analytical skills, creativity, critical thinking, ability to identify problems and propose solutions
• Excellent presentation and interpersonal skills
• Fluent in English.
• Good to have: CISSP, CISM and any technical training.

Skills Required
Regulatory Compliance, Cobit, nist, Cloud Security