Information Security Specialist (f/m/x) – Embedded Risk Team in Chief Secruity Office

Deutsche Bank; Berlin; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Mental health support

Health check-ups

Diversity & inclusion

Pension plans

Zusammenfassung

Die Deutsche Bank Technology in Berlin sucht eine/n Information Security Specialist (f/m/x) im CSO Embedded Risk Team. Sie treiben das Risikomanagement im Informationssicherheitskontext voran und arbeiten eng mit den drei Linien der Verteidigung zusammen.

Zu den Aufgaben gehören die End-to-End-Überwachung des Risikofindings-Portfolios, Risikobewertung, Berichte an die Führungsebene und die Weiterentwicklung von Prozessen und Tools.

Qualifikationen

• Fundierte Kenntnisse im Informationssicherheits-Risikomanagement und ISO 27001.
• Ausgeprägte analytische, organisatorische und Problemlösungsfähigkeiten.
• Erfahrung in Risikobewertung, Erkennung von systemischen Kontrollen.
• Gutes Stakeholder-Management über globale Stakeholder hinweg.
• Starke Kommunikationsfähigkeiten; Berichterstattung an Führungskräfte.

Aufgaben

• Überwachung des Informationssicherheits-Risikofindings-Portfolios; Risikodatenanalytik, Berichterstattung, Governance.
• Portfoliorisiken mit Kontrollen aus dem DB Control Inventory verknüpfen; wiederkehrende Mängel identifizieren.
• Kontrollverknüpfungen überprüfen, Eskalationen koordinieren und Lösungen vorantreiben.
• Risiko-Themen analysieren, Schwachstellen bewerten und Trends erkennen.
• Berichte und Portfoliomanagement-Analysen erstellen; Führungsebene informieren.
• Zusammenarbeit mit allen drei Linien der Verteidigung; First-Line-Ansprechpartner für Findings.
• Prozess- und Tool-Verbesserungen vorantreiben; Anforderungen in klare Geschäftssprache übersetzen.

Kenntnisse

InfoSec Risk Mgmt

ISO 27001

Finding Management

Remediation Governance

Analytical Skills

Stakeholder Mgmt

Communication

Risk Reporting

AI Tools

Jobbeschreibung

Deutsche Bank Technology in Berlin

DB Technology is a global team of tech specialists, spread across multiple trading hubs and tech centres. We have a strong focus on promoting technical excellence - our engineers work at the forefront of financial services innovation using cutting-edge technologies.

Position Overview

DB Technology is a global team of tech specialists, spread across multiple trading hubs and tech centres. We have a strong focus on promoting technical excellence - our engineers work at the forefront of financial services innovation using cutting-edge technologies.

Our Berlin location is our most recent addition to our global network of tech centres and growing strongly. We are committed to building a diverse workforce and to creating excellent opportunities for talented engineers and technologists. Our tech teams and business units use agile ways of working to create #GlobalHausbank solutions from our home market.

Chief Security Office

The Chief Security Office (CSO) is responsible for the creation, maintenance, and implementation of the information security strategy of Deutsche Bank Group. CSO steers the measures derived from the information security strategy and provides guidance to employees regarding the identification, development, implementation, and execution of all processes which serve to reduce information security risk, to respond to incidents, and to establish appropriate policies and standards for information security management.

Role Overview

The Information Security Specialist (f/m/x) within the TDI CSO Embedded Risk Team (ERT) is responsible for driving Information Security Risk within the bank's defined risk tolerance while supporting the overall security strategy. The role acts as a key partner across all 3LoDs, ensuring effective governance, oversight, and Control linkage to Information Security Risk Findings. The role requires strong communication, stakeholder engagement, risk analysis, and management reporting skills to support senior leadership decision making and effective risk reduction.

Your Key Responsibilities

Providing end-to-end oversight of the Information Security Risk Finding portfolio by driving risk analytics, reporting, governance, stakeholder engagement, and continuous process improvement to support risk-informed decision-making across the organization.

• Manage the Information Security Risk Finding portfolio, ensuring findings are linked to relevant controls from the DBs Control Inventory to identify recurring deficiencies and systemic control gaps.
• Oversee and challenge control-linkage exceptions, coordinating timely investigation, escalation, through resolution.
• Analyse risk themes, control weaknesses, and remediation effectiveness to identify emerging risks, recurring issues, and cross-divisional dependencies.
• Develop risk portfolio analytics and management reporting, providing senior stakeholders with clear insights, recommendations, remediation status, and trend information to support risk-based decision-making.
• Partner with stakeholders across all three Lines of Defense, acting as a key first-line contact for Information Security Risk Findings and supporting effective governance.
• Drive continuous process and tool improvement by identifying enhancement opportunities and translating operational needs into clear business requirements.

Your Skills And Experiences

• Strong understanding of Information Security Risk Management, knowledge of Information Security framework like ISO 27001, finding management, and remediation governance.
• Strong analytical, organizational, and problem-solving capabilities, combined with experience in process improvement, business requirements definition, and effective challenge and escalation
• Proven experience in risk analysis, identification of systemic control weaknesses, and interpretation of risk trends and dependencies.
• Strong stakeholder management and influencing skills, with the ability to collaborate globally across business, technology, control functions, and all three Lines of Defense.
• Excellent written and verbal communication skills, including the ability to translate complex risk information into concise, management-ready insights and recommendations.
• Experience in preparing and presenting risk reporting, portfolio analytics, and status updates to senior management, governance forums, and working groups.
• Proven ability to leverage AI tools to enhance productivity, optimize workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.

What We Offer

We provide you with a comprehensive portfolio of benefits and offerings to support both, your private and professional needs.

• Emotionally and mentally balanced A positive mind helps us master the challenges of everyday life - both professionally and privately. We offer consultation in difficult life situations as well as mental health awareness trainings.
• Physically thriving We support you in staying physically fit through an offering to maintain personal health and a professional environment. You can benefit from health check-ups; vaccination drives as well as advice on healthy living and nutrition.
• Socially connected Networking opens up new perspectives, helps us thrive professionally and personally as well as strengthens our self-confidence and well-being. You can benefit from PME family service, FitnessCenter Job, flexible working (e.g parttime, hybrid working, job tandem) as well as programs that foster diversity, equity and inclusion.
• Financially secure We provide you with financial security not only during your active career but also for the future. You can benefit from offerings such as pension plans, banking services, company bicycle or "Deutschlandticket" as well as from exclusive employee rates and personalized financial advice through our "Mitarbeiterbank".

This job is available in full and parttime.

Wir streben eine Unternehmenskultur an, in der wir gemeinsam jeden Tag das Beste geben. Dazu gehören verantwortungsvolles Handeln, wirtschaftliches Denken, Initiative ergreifen und zielgerichtete Zusammenarbeit.

Gemeinsam teilen und feiern wir die Erfolge unserer Mitarbeiter*innen. Gemeinsam sind wir die Deutsche Bank Gruppe.

Wir begrüßen Bewerbungen von allen Menschen und fördern ein positives, faires und integratives Arbeitsumfeld.