Assurance Team Lead - Audit and Risk Management

Deutsche Bank; Bengaluru; On-site; INR 3,500,000 - 6,500,000; Full time

Benefits offered by this job

Best in class leave policy

Gender neutral parental leave

Certifications sponsorship

Employee Assistance Program

Health insurance

Life Insurance

Health screening

Job summary

Deutsche Bank in Bangalore and Pune, India, seeks an Assurance Team Lead – Audit and Risk Management (Vice President) to head audit, risk management, and governance for Hybrid Cloud Infrastructure. You will drive end-to-end remediation, ensure timely closure of findings, and provide transparent risk reporting to senior stakeholders.

The role emphasizes project management, cross-functional collaboration, and proactive risk mitigation across GTI frameworks and regulatory expectations.

Qualifications

• Experience in leading audit, risk and governance activities for technology infrastructure.
• Strong project management and stakeholder engagement skills.
• Proven ability to deliver risk reporting to senior stakeholders.

Responsibilities

• Lead audit, risk, VRM, governance and risk reporting activities for HCI.
• Manage the full audit finding lifecycle and remediation tracking.
• Drive proactive risk management by identifying emerging risks and control weaknesses.
• Oversee vendor risk management activities and regulatory obligations.
• Represent the controls and assurance function in governance forums.

Skills

Audit and risk management

Governance

Vendor risk management

Stakeholder management

Risk reporting

Tools

NIST

COBIT

ITIL

ISO 27001

Job description

Job Title

Assurance Team Lead – Audit and Risk Management

Corporate Title

Vice President

Location

Bangalore, Pune, India

Role Description

The Assurance Team Lead – Audit and Risk Management is responsible for leading audit, risk, vendor risk management, governance, and risk reporting activities for the Hybrid Cloud Infrastructure division. The role drives end-to-end delivery of risk reduction and audit remediation initiatives, ensures timely closure of audit findings, strengthens the control environment, and provides transparent risk reporting to senior stakeholders. Strong project management, stakeholder engagement, governance discipline, and technology risk oversight are key success factors for the role. The role also drives proactive risk management by identifying emerging risks, assessing control weaknesses, initiating early mitigation actions, and ensuring risks are managed before they materialize into audit findings or control issues.

What we’ll offer you

As part of our flexible scheme, here are just some of the benefits that you’ll enjoy,

• Best in class leave policy.
• Gender neutral parental leaves 100% reimbursement under childcare assistance benefit (gender neutral)
• Sponsorship for Industry relevant certifications and education
• Employee Assistance Program for you and your family members
• Comprehensive Hospitalization Insurance for you and your dependents
• Accident and Term life Insurance
• Complementary Health screening for 35 yrs. and above

Your key responsibilities

Lead audit, risk, VRM, governance, and risk reporting activities for HCI, ensuring alignment with GTI priorities, internal frameworks, and regulatory expectations.

• Manage the full audit finding lifecycle, including challenge, management action plans, remediation tracking, evidence coordination, validation support, and timely closure.
• Drive proactive risk management by identifying emerging risks, control weaknesses, recurring themes, and dependencies before they become audit findings or control issues.
• Maintain a forward-looking risk profile for HCI through risk identification, assessment, monitoring, reporting, and early mitigation planning.
• Identify and prioritise material remediation actions across GTI, including cross-divisional dependencies and control improvement initiatives.
• Track remediation progress, overdue actions, and closure readiness, ensuring documentation is complete, evidence-based, and audit-ready.
• Oversee vendor risk management activities, including risk assessments, recertifications, control reviews, issue management, subcontractor oversight, and regulatory obligations.
• Represent the controls and assurance function in governance forums, providing clear updates on risks, audit findings, vendor issues, remediation status, and key themes.
• Escalate risks, delays, gaps, and dependencies early, ensuring decisions and actions are tracked through to completion.
• Partner with Audit, 2nd Line of Defence, Divisional Control, Embedded Risk, Service Owners, and Technology teams to strengthen the control environment.
• Deliver timely and action-oriented risk reporting to senior stakeholders, highlighting risk posture, remediation progress, overdue items, and areas requiring management attention.
• Promote a proactive IT/IS risk culture through early issue identification, transparent escalation, strong evidence discipline, and sustainable control improvements.

Service Owner Risk Assessment and Management

Complete risk assessments, ensure proper screening, and report third-party issues.

Regulatory Compliance

Nominate Local Service Owners and ensure compliance with local regulatory requirements.

Third-Party Selection and Screening

Select third parties, consider risk aspects, and review screening outputs.

Control Assessments and Mitigation

Ensure third parties complete required tasks, develop continuity plans, and manage risk mitigation actions.

Continuous Monitoring and Termination

Update risk assessments, perform post go-live controls, and execute termination strategies.

Contracting and Payment

Complete risk assessments before service commencement, ensure contractual clauses are included, and execute risk process activities for contract renewals or amendments.

Stakeholder Management – Identify, Partner, and Collaborate

Establish relationship with external and internal Audit teams to ensure effective and robust challenge to finding and to establish smart management action plans.

• Partner with 2nd LoD functions within the bank to ensure alignment towards Group wide minimum control standards
• Collaborate closely and proactively with Divisional Control teams and Embedded Risk teams to manage the audit finding lifecycle
• Promote and support proactive IT/IS risk culture at the Bank

Your skills and experience

8–10 years of experience in a global bank, preferably within Technology, IT/IS Audit, Risk and Controls, Vendor Risk Management, or Control Assurance.

Minimum 5 years of experience in technology risk and control, including risk framework implementation, control assessments, remediation tracking, and governance reporting.

Proven experience in managing audit remediation, risk reduction initiatives, vendor governance activities, issue closure, and stakeholder delivery in a global organisation.

Strong understanding of proactive risk management, including early identification of emerging risks, control gaps, recurring themes, and preventive mitigation actions.

Good knowledge of technology and control frameworks such as NIST, COBIT, ITIL, ISO 27001, and related industry practices.

Strong awareness of the technology risk landscape, regulatory expectations, third-party risk requirements, and operational resilience considerations.

Experience in preparing clear, accurate, and action-oriented risk reporting for governance forums and senior stakeholders.

Cloud technology knowledge or certifications across GCP, AWS, Azure, or similar domains would be advantageous.

Professional qualifications or certifications in technology risk management, audit, information security, vendor risk management, or cloud governance would be beneficial.

Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.

How we’ll support you

Training and development to help you excel in your career.

Coaching and support from experts in your team.

A culture of continuous learning to aid progression.

A range of flexible benefits that you can tailor to suit your needs.

About us and our teams

Please visit our company website for further information: https://www.db.com/company/company.html

We strive for a culture in which we are empowered to excel together every day.

This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people.

Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

Experience Level

Senior Level