Information Security Specialist

Job Description:

Job Title- Information Security Specialist

Location- Pune, India

Role Description

The Security Compliance & Risk Team is responsible for the overall security posture and risk governance across all End-User products and services.  As Information Security Specialist, you will be responsible for collaborating with the EUC Product and Operations Manager, your respective team and affiliate stakeholders to respond to various demands in the end user asset management space.  This is a dynamic role which will also entail leading collaboration and driving forward technology needs and responding to various escalations, inquiries and responding to audits and regulatory questionnaires.

You’ll be a well-seasoned technologist with 10+ years of experience and will join a global team of other expert individuals that collectively make a large impact to our bank through creativity, innovation, and passion.

In summary, the Information Security Specialist is responsible for delivering specific aspects of the risk, security, and control strategy for End User Computing Security, Risk and Compliance Team.

What we’ll offer you

As part of our flexible scheme, here are just some of the benefits that you’ll enjoy

• Best in class leave policy
• Gender neutral parental leaves
• 100% reimbursement under childcare assistance benefit (gender neutral)
• Sponsorship for Industry relevant certifications and education
• Employee Assistance Program for you and your family members
• Comprehensive Hospitalization Insurance for you and your dependents
• Accident and Term life Insurance
• Complementary Health screening for 35 yrs. and above

Your Key Responsibilities:

• Must have good exposure to relationship and project management skills.
• Monitoring and tracking risk and control activities, risk-based control reporting of key issues, KPIs, and KRIs as it pertains to your book of work.
• Respond to global regulatory and infosec certification queries like ISO 27001, COBIT, RBI, MAS, EBA, BaFin, FED, others.
• The ability to multitask, prioritize work and adapt during sometimes pressured situations.
• Ability to effectively work with business users, developers, and other technology colleagues outside of your direct team, across a broad range of business functions and at all levels of the organization
• Experience of working on coordinating activity related to Technology questionnaires received from regulators.
• Ownership of the End User Asset Governance activities, like monitoring end user device management processes across all regions.
• Manage and coordinate the Customer services relationship on regional level.
• Acts as a SME to central teams, procurement functions and senior management.
• Ability to monitor, manage, develop, and drive performance within the team.
• Focus on expediting audit points and findings to successful outcomes and closure.
• Ensure Customer Services adheres to bank wide regulatory and compliance requirements and risk frameworks.
• Data Quality management - identifying, reporting, analyzing, and resolving issues impacting the timeliness, accuracy or completeness of risk measures using the Department’s and Bank’s framework for Data//Issue management by collaborating across teams and stakeholders.
• Be the subject matter expert for End User Device management risks and the Operational & Control processes
• Owns and maintain policy procedures or KODs on company policy portal in accordance with regulator and information security guidelines.
• Measure and Track compliance of global local customer services in accordance with Procedures on policy portal.
• Maintain central control of Network access of end user devices on bank's network.
• Data Analysis, Global Regulatory and Management Reporting.
• Proactive approach towards Process Automation.

Your skills and experience

• Knowledge of any of the control’s framework like COBIT, ISO 27001:2022 or NIST
• Sound knowledge on Windows OS, ServiceNow Operations.
• Experience in preparing key operating documents/procedures/policies.
• Understanding of Microsoft SCCM/Intune tools and MS patch management process
• Ability to apply regulatory guidance to review process in absence of written policy
• Good to have knowledge on application packaging and application virtualization
• Able to cope well under pressure and meet deadlines
• Eye for detail and willingness to question current state practices
• Independent, self-motivated and a team player.
• Excellent verbal and written communication skills
• Strong time management, organizational, planning and follow-up skills; ability to multi-task effectively
• Strong analytical and problem-solving skills.
• Strong interpersonal skills; ability to partner with internal partners and leverage internal resources
• Strong capacity to assimilate other stakeholders perspectives and fast learning abilities
• Proficient in MS Office applications

Experience

• 10+ years of experience with minimum with 6+ year experience in Info/Cyber Security Project management.
• Seeking a candidate with good exposure in SCCM/Intune, ServiceNow Asset/Configuration Management, Control Objectives implementation.
• Experienced in working with third parties and cross-functional teams.
• Ability to diagnose improvement areas across processes, tools and systems.
• Profound analytical skills.
• Experience in working across multiple disciplines, cultures and time zones.
• Strong communication & collaboration skills.
• Bachelor’s degree in computer science, information systems, business administration or related field
• ITIL, PMP, Prince certifications preferred.
• Good to have SQL/Database/PowerShell scripting

How we’ll support you

• Training and development to help you excel in your career
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs

About us and our teams

Please visit our company website for further information:

https://www.db.com/company/company.htm

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.