Hybrid InfoSec Analyst — Third-Party Risk & Compliance

Deutsche Bank AG; Jacksonville (FL); Híbrido; USD 48 000 - 74 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid working model

Generous vacation

Wellbeing benefits

Retirement savings plans

Educational resources

Resumo da oferta

Deutsche Bank AG is seeking an Information Security Analyst in Jacksonville, FL. You will support the CSO Third Party Security team by conducting risk assessments, reviewing third party policies and evidence, and analyzing security gaps with a focus on regulatory alignment and threat-informed security controls.

The role requires collaboration with TPM/TPRM programs and an emphasis on secure vendor management within a hybrid work model. Competitive benefits accompany the position.

Qualificações

• Experience conducting information security risk assessments including third party reviews.
• Knowledge of regulatory and framework requirements (ISO27001, NIST, SOC2, PCI).
• Familiarity with cloud security assessments and reporting.
• Experience with Cloud Security Alliance tools CCM/CAIQ.

Responsabilidades

• Conduct Information Security Third Party risk assessments, including onsite reviews.
• Review Third Party policies and evidence against security requirements.
• Analyze and document security gaps and their business impact.
• Coordinate Third Party Information Security Review processes and elevate issues.
• Support improvements to the security control framework and stakeholder communication.

Conhecimentos

IT controls

Risk management

ISO27001

NIST

SOC2

PCI

MITRE ATT&CK

Cloud security

MS Office

Ferramentas

CCM

CAIQ

Shared Assessment Programs

Descrição da oferta de emprego

Deutsche Bank AG is seeking an Information Security Analyst in Jacksonville, FL. You will support the CSO Third Party Security team by conducting risk assessments, reviewing third party policies and evidence, and analyzing security gaps with a focus on regulatory alignment and threat-informed security controls.

The role requires collaboration with TPM/TPRM programs and an emphasis on secure vendor management within a hybrid work model. Competitive benefits accompany the position.