Divisional Risk and Control Specialist, VP

Deutsche Bank AG; Pune District; On-site; INR 3,200,000 - 5,200,000; Full time

Benefits offered by this job

Leave policy

Parental leaves

Certifications sponsorship

EAP for you and family

Hospitalization insurance

Life & accident insurance

Health screening

Job summary

Deutsche Bank AG in Pune, India, seeks a Divisional Risk and Control Specialist, VP, to lead IT and information security assessments across the Corporate Bank technology landscape. You will evaluate control design and effectiveness, identify risks, and framing remediation strategies with stakeholders.

The role requires strong experience in enterprise architecture, cloud/on-prem, and regulatory expectations, with certifications like CISA/CISSP/CRISC preferred.

Qualifications

• Extensive IT/cyber security assessments experience in risk, information security, controls assurance, or related discipline.
• Deep understanding of enterprise technology and architecture, including cloud and on-premises environments.
• Ability to translate technical observations into clear risk insights and remediation actions.
• Experience applying frameworks such as COBIT, NIST, ISO 27001; professional certifications desirable.

Responsibilities

• Lead end-to-end IT and information security assessments across CB Technology landscape.
• Assess design, implementation and operating effectiveness of key controls.
• Develop risk-based testing scope and sampling approaches; produce clear conclusions.
• Challenge control owners and promote pragmatic remediation actions.
• Collaborate with Architecture, Security, Audit and Control stakeholders to improve assurance coverage.

Skills

IT risk assessments

Cyber security

Controls assurance

Stakeholder management

Agile/DevOps

Risk-based testing

Education

Relevant professional certifications (CISA / CISSP / CRISC)

Tools

COBIT

NIST

ISO 27001

Cloud security (GCP)

Job description

Job Description: Job Title: Divisional Risk and Control Specialist, VP Location: Pune, India Corporate Title: VP

Corporate Banking is a technology-driven business operating in an increasingly real-time, interconnected environment, where clients expect seamless services, integrated platforms and trusted access to data. Corporate Bank (CB) Technology supports this ambition through a complex global ecosystem of business-critical applications, platforms, data services and infrastructure. We are seeking an experienced technology risk professional to play a key role in our Proactive Risk Testing Programme, delivering rigorous, risk-based assessments across this landscape. The role requires the ability to develop a deep understanding of applications and their end-to-end architecture, critically evaluate the design and effectiveness of implemented technology controls, and identify both existing and emerging IT and Information Security risks. Working closely with senior technology, business and control stakeholders, you will translate complex technical observations into clear risk insights, strengthen the testing strategy and drive sustainable improvements that enhance the resilience, security and control environment of mission-critical technology services.

What we’ll offer you

• Best in class leave policy
• Gender neutral parental leaves
• 100% reimbursement under childcare assistance benefit (gender neutral)
• Sponsorship for Industry relevant certifications and education
• Employee Assistance Program for you and your family members
• Comprehensive Hospitalization Insurance for you and your dependents
• Accident and Term life Insurance
• Complementary Health screening for 35 yrs. and above

Your key responsibilities

• Lead and deliver risk-based, end-to-end IT and Information Security assessments across the Corporate Bank (CB) Technology landscape, independently assessing the design, implementation and operating effectiveness of key controls.
• Develop an in-depth understanding of business services and their supporting technology, including application and platform architecture, infrastructure, databases, operating systems, cloud services, networks, interfaces, APIs, data flows, batch and real-time processing, and third-party dependencies.
• Perform technical deep dives across applications, platforms, databases and infrastructure to identify and assess existing and emerging IT and IS risks, control weaknesses, root causes, systemic themes and potential impacts on confidentiality, integrity, resilience and regulatory compliance.
• Assess technology lifecycle risks and controls including design, development and production considering aspects such as access management, security, operations and resilience.
• Apply professional judgement to define risk-based testing scope, develop risk and control matrices, determine sampling and testing approaches, analyze technical evidence, and produce clear, well-supported conclusions in line with testing standards.
• Challenge technology and control owners constructively, communicate complex technical risks in business terms and support agreement on pragmatic and sustainable remediation actions.
• Identify cross-application and thematic risks, emerging technology threats, control automation opportunities and opportunities to use data analytics and continuous monitoring to improve assurance coverage.
• Partner with Technology Application Teams, Architects, Engineering, Information Security, Control Owners, the Divisional Control Office, Group Audit and other stakeholders to promote transparency and sustainable risk mitigation.
• Contribute to the ongoing enhancement of risk-based testing methodologies, standards, documentation and quality assurance, while providing guidance and technical coaching to colleagues where required.

Your skills and experience

Extensive experience in IT/Cyber security assessments, technology risk, information security, controls assurance or related discipline, including leading complex reviews in a large, regulated organization.

In-depth understanding of enterprise technology and application architecture, including cloud and on-premises infrastructure, databases, operating systems, networks, APIs, middleware, data integration and third-party services.

Demonstrable ability to analyze architecture diagrams, data flows, configurations, system logs, access models, vulnerability information and other technical evidence to identify control gaps and assess their business and risk impact.

Strong knowledge of IT General Controls and Application Controls, cyber security, secure software development, identity and access management, privileged access management, network and cloud security, vulnerability management, data and cryptographic protection, security monitoring, incident management, operational resilience and technology lifecycle management.

Awareness of emerging technology and risk areas, including cloud security, DevSecOps, automation, artificial intelligence, open-source software, third-party concentration and evolving cyber threats.

Experience applying recognized frameworks and standards such as COBIT, NIST, ISO 27001, ITIL and relevant regulatory expectations; professional certifications such as CISA, CISSP, CRISC, or equivalent is desirable.

Strong analytical and problem-solving capability, with the confidence to challenge senior stakeholders and translate complex technical matters into concise, risk-based findings and practical remediation actions.

Excellent written and verbal communication, stakeholder management and influencing skills, with the ability to work independently, manage competing priorities and deliver high-quality outcomes.

Experience working in Agile and DevOps environments; knowledge of Google Cloud Platform (GCP) and its control environment would be an advantage.

Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.

How we’ll support you

• Training and development to help you excel in your career
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs

About us and our teams

Please visit our company website for further information: https://www.db.com/company/company.html

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively. Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

For over 150 years, our dedication to being the Global Hausbank for our clients has been driven by our people – in around 60 countries and across more than 150 nationalities. Their deep understanding, insights, expertise, and passion help our clients navigate an increasingly complex world – be it in our Corporate Bank, our Private Bank, our Investment Bank or our Asset Management (DWS) division. Together we can make a great impact for our clients at home and abroad, securing their lasting success and financial security.

More information at: Deutsche Bank Careers (db.com)