Third-Party Information Security Risk Analyst | Hybrid

Deutsche Bank AG; United States; Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Private healthcare and life insurance

Hybrid working model

24 days holiday + bank holidays

Job summary

Deutsche Bank AG's Global Technology hub in Central and Eastern Europe is seeking a proactive Information Security professional to join the CSO TPS team. You will assess third-party risk, review security policies, and document gaps with business impact, supporting the bank's security program.

This role emphasizes collaboration with TPM and TPRM teams, leveraging frameworks like ISO27001, NIST, and PCI, and applying AI tools to streamline risk reporting while ensuring ethical data use.

Qualifications

• Knowledge of IT and information security controls and risk management.
• Familiarity with ISO27001, NIST, ENISA, SOC2, PCI, and MITRE ATT&CK.
• Understanding of financial regulations impacting InfoSec (DORA, GDPR, NYDFS).
• Experience with Cloud Security Alliance tools (CCM, CAIQ) and Shared Assessment Programs.
• Proficiency in MS Office Suite and data reporting for metrics and analysis.
• Ability to leverage AI tools to enhance productivity and ethical use of data.

Responsibilities

• Conduct Information Security Third Party risk assessments, including onsite reviews.
• Review Third Party policies and evidence against DB security requirements.
• Analyze and document security gaps and their business impact.
• Coordinate Third Party Information Security Review processes and elevate issues.
• Support improvements to the security control framework and stakeholder communication.

Skills

Info security controls

Regulatory frameworks (ISO27001, NIST,

Financial regulations (DORA, GDPR, NYD

MS Office & data reporting

AI tools usage

Tools

CCM

CAIQ

Shared Assessment Programs

Job description

Deutsche Bank AG's Global Technology hub in Central and Eastern Europe is seeking a proactive Information Security professional to join the CSO TPS team. You will assess third-party risk, review security policies, and document gaps with business impact, supporting the bank's security program.

This role emphasizes collaboration with TPM and TPRM teams, leveraging frameworks like ISO27001, NIST, and PCI, and applying AI tools to streamline risk reporting while ensuring ethical data use.