Patch Management Governance & Reporting Support

Deutsche Bank; Park Central; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid Working

Competitive salary and non-contributry

30 days' holiday + bank holidays

Life Assurance and Private Healthcare

Flexible benefits: Retail Discounts, a

Job summary

Deutsche Bank in Birmingham seeks a Patch Management Governance & Reporting Support to assist technology units in achieving patch compliance and timely reporting. You will help establish governance, KPIs, and remediation activities within a centralized GTI Patch Management function.

The role requires experience in large-scale programs, risk management, and patch management with IT infrastructure knowledge; familiarity with AI tools for productivity is advantageous.

Qualifications

• Experience in large-scale technology programs with multiple stakeholders.
• Experience in risk management and control governance duties.
• Knowledge of IT project methodologies and lifecycle (ITIL and SDLC).
• Awareness of Vulnerability Management processes.
• Strong patch management understanding with IT infrastructure knowledge.
• Ability to leverage AI tools while ensuring ethical use of data.

Responsibilities

• Assist technology units to achieve compliance with Patch Management KPIs and provide timely patch reporting.
• Establish and operate governance procedures and controls for sustainable patch management processes.
• Support audit remediation and compliance activities related to patch governance and reporting.
• Maintain working instruction documentation and training materials; update as needed.

Skills

Large-scale programs

Risk management

IT project methodologies

Vulnerability management

Patch management

AI tools usage

Tools

ITIL

SDLC

Job description

Job Title Patch Management Governance & Reporting Support Location Birmingham Corporate Title Assistant Vice President

The Patch Management Team governs the end-to-end patching process, ensuring vulnerabilities are assessed, patches are tested and deployed, and compliance is tracked against policy and remediation timelines aligned to regulatory expectations.

The team works with Technology Owners, Engineering Leads, and CSO (Chief Security Office) to manage patch risks, oversee remediation progress, drive compliance, and report patching performance to required governance forums.

What we’ll offer you

A healthy, engaged and well-supported workforce are better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That's why we are committed to providing an environment with your development and wellbeing at its centre.

You can expect:

• Hybrid Working - we understand that employee expectations and preferences are changing. We have implemented a model that enables eligible employees to work remotely for a part of their working time and reach a working pattern that works for them
• Competitive salary and non-contributory pension
• 30 days' holiday plus bank holidays, with the option to purchase additional days
• Life Assurance and Private Healthcare for you and your family
• A range of flexible benefits including Retail Discounts, a Bike4Work scheme and Gym benefits
• The opportunity to support a wide ranging CSR programme + 2 days' volunteering leave per year

Your key responsibilities

• Assisting Technology units to be compliant with the Patch Management KOD and exceed Key Performance Indicators (KPIs). Requirement to work closely with technology units to ensure accurate, complete, and consistent patch reporting is established, sustained and timely and regularly provided
• Establishing and operating new governance procedures and controls. Establishing and being involved in the effective and consistent operation of both new and enhanced sustainable patch management governance processes, solutions and capabilities
• Having ownership and/or participating extensively in audit remediation and compliance related activities relating to the robust governance of the Patch Management process, which may include, but not limited to: the identification and establishment of new or enhanced KPIs and related IT risk/senior management reporting, the establishment of new and/or enhanced governance capabilities and associated reporting, the onboarding of additional and/or new technologies into the reporting and governance services of the centralized GTI Patch Management function, and the creation of new or enhanced patch management standards and guidelines
• Responsibility for maintaining working instruction documentation and user training materials and will be expected to identify update requirements and ensure such updates are agreed and applied

Your skills and experience

• Experience working in large scale technology programs / Operations teams with a range of stakeholders simultaneously with limited supervision and guidance
• Experience in undertaking risk management activities e.g. operating/performing control governance duties, identifying new risks etc.
• Knowledge of various IT project methodologies and life cycles (Information Technology Infrastructure Library and software development life cycle)
• Awareness of the Vulnerability Management processes
• Very good understanding of patch management and a broad technical understanding of IT infrastructure technologies and how they operate, especially regarding how patches are managed and applied
• Proven ability to leverage AI tools to enhance productivity, optimize workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs

How we’ll support you

• Training and development to help you excel in your career
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs
• We value diversity and as an equal opportunities' employer, we make reasonable adjustments for those with a disability such as the provision of assistive equipment if required (e.g. screen readers, assistive hearing devices, adapted keyboards)

Please note the expected salary for some roles may be below the minimum level requirements to support candidates who require a Skilled Worker visa to work in the UK. Should you already have a Skilled Worker visa and are identified for a role, we can discuss and support you with the process.

About us

Deutsche Bank is the lead