Cyber Security Risk, Controls & Assurance, VP

DWS Group; Madrid; On-site; EUR 180,000 - 280,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

DWS Group in Madrid is seeking a Cyber Security Risk, Controls & Assurance, VP to lead the AI security risk framework and assurance programs in a rapidly evolving threat landscape.

You will map technical vulnerabilities to policies, standards, regulatory expectations, and audit evidence; coordinate AI risk assessments and control testing; and support third-party AI security assurance, reporting to the CSO AI Security CoE Lead. This senior role shapes security strategy across the organization.

Qualifications

• 8+ years in cybersecurity risk, technology risk, governance, controls, audit, or assurance.
• Recent exposure to AI/ML and GenAI risk.
• Experience with vulnerability risk-rating, remediation governance, and control testing.
• Ability to map vulnerabilities and threats to policies, standards and regulatory requirements.

Responsibilities

• Develop and maintain the AI security control framework and assurance methodology.
• Map technical requirements to policies, standards, regulatory expectations, and audit evidence.
• Coordinate AI risk assessments and control testing.
• Support third-party and vendor AI security assurance.
• Develop AI security KRIs/KPIs and support executive reporting.

Skills

AI security

Risk assessments

Controls & assurance

Vulnerability management

Regulatory reporting

Executive reporting

AI/ML risk

Vendor security

Job description

Position Overview

Employer: DWS Group

Title: Cyber Security Risk, Controls & Assurance, VP

Location: Madrid

Job Code: placeholder for LinkedIn job wrapping

About DWS:

Today, markets face a whole new set of pressures -- but also a whole lot of opportunity too. Opportunity to innovate differently. Opportunity to invest responsibly. And opportunity to make change.

Join us at DWS, and you can be part of an industry-leading firm with a global presence. You can lead ambitious opportunities and shape the future of investing. You can support our clients, local communities, and the environment.

We're looking for creative thinkers and innovators to join us as the world continues to transform. As whole markets change, one thing remains clear; our people always work together to capture the opportunities of tomorrow.

As investors on behalf of our clients, it is our role to find investment solutions. Ensuring the best possible foundation for our clients' financial future. And in return, we'll give you the support and platform to develop new skills, make an impact and work alongside some of the industry's greatest thought leaders. This is your chance to achieve your goals and lead an extraordinary career.

This is your chance to invest in your future.

Team / Division Overview

Read more about DWS and who we are here.

DWS is transforming its Technology function and growing its internal capabilities. As AI and other emerging technologies continue to reshape the business and threat landscape, we are building a focused AI Security capability that brings together the right mix of cybersecurity, engineering, architecture, data protection, offensive security, and risk expertise. These roles will help grow and evolve our security function so we can securely enable innovation while identifying and managing new and rapidly developing risks. You will be a key member of this team, and an important part of our journey to build a scalable, forward-looking AI Security capability.

The candidate for this role reports into the DWS CSO AI Security CoE Lead and will be a key member of the AI Security Team. The Cyber Security Risk, Controls & Assurance VP is responsible for establishing AI security risk and control processes that support secure AI adoption and evolving regulatory expectations.

Your Responsibilities

As a Cyber Security Risk, Controls & Assurance, VP you will:

• Develop and maintain the AI security control framework and assurance methodology.


• Map technical requirements to policies, standards, regulatory expectations, and audit evidence.


• Coordinate AI risk assessments and control testing.


• Support third-party and vendor AI security assurance.


• Develop AI security KRIs/KPIs and support executive, risk, compliance, and audit reporting.

We are looking for

• 8 years of cybersecurity risk, technology risk, vulnerability management governance, controls, audit, or assurance experience, with recent exposure to AI/ML and GenAI risk.


• Strong experience with vulnerability risk-rating, remediation governance, exception management, control testing, metrics, escalation, and executive reporting.


• Experience mapping technical vulnerabilities and emerging threats to policies, standards, regulatory requirements, evidence, and third‑party assurance processes.


• Ability to adapt established cyber risk and vulnerability management practices to rapidly evolving frontier AI threats.


• Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgement to ensure responsible and ethical use of data and AI outputs.

What we’ll offer you

At DWS we're serious about diversity, equity and creating an inclusive culture where colleagues can be themselves and it's important to us that you enjoy coming to work - feeling healthy, happy and rewarded. At DWS, you'll have access to a range of benefits which you can choose from to create a personalised plan unique to your lifestyle. Whether you're interested in healthcare, company perks, or are thinking about your retirement plan, there's something for everyone.

DWS' Hybrid Working model is designed to find the right balance between in-person collaboration and engagement in the office, which is core to our working culture, and working from home. Each business group varies on the split between time spent in the office and at home, but this will be discussed and made clear as part of your application and interview process. We will continue to review and evolve our working environments and methods to ensure that we are working in the best way possible for our people.

If you require any adjustments or changes to be made to the interview process for any reason including, or related to a disability or long‑term health condition, then please contact your recruiter and let them know what assistance you may need. Examples of adjustments include providing a change to the format of the interview, or providing assistance when at the DWS office. This will not affect your application and your recruitment team will discuss options with you.

Our values define the working environment we strive to create -- diverse, supportive and welcoming of different views. We embrace a culture reflecting a variety of perspectives, insights and backgrounds to drive innovation. We build talented and diverse teams to drive business results and encourage our people to develop to their full potential. Talk to us about flexible work arrangements and other initiatives we offer.

We promote good working relationships and encourage high standards of conduct and work performance. We welcome applications from talented people from all cultures, countries, races, genders, sexual orientations, disabilities, beliefs and generations and are committed to providing a working environment free from harassment, discrimination and retaliation.

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.