Information Security Analyst - Assistant Vice President

Job Description:

Job Title Information Security Analyst

Corporate Title Assistant Vice President

Location Jacksonville, FL

Overview

We are looking for a knowledgeable Information Security Analyst to operating as a member of the Chief Security Office (CSO) Third Party Security team (TPS). As an Information Security Analyst, you will be responsible for supporting the development, execution, and maintenance of Deutsche Bank’s information security strategy and program under the management of the CSO. You will work in strategic alignment and partnership with Deutsche Bank’s Third Party Risk Management (TPRM) program under Third Party Management (TPM).

What We Offer You

• A diverse and inclusive environment that embraces change, innovation, and collaboration

• A hybrid working model, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days

• Employee Resource Groups support an inclusive workplace for everyone and promote community engagement

• Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits

• Educational resources, matching gift and volunteer programs

What You’ll Do

• Conduct Information Security Third Party risk assessments as part of the overall Third-Party Risk Management process (incl. onsite visits/reviews at our Third Parties) as well as risk review and business impact analysis of the identified gaps, and provide comprehensive documentation of the identified gaps

• Review Third Party policies and evidence related to Information Security, review Third Party security gap analysis against the Deutsche Bank security requirements, while tracking Third Party and services, escalate issues when necessary

• Formulate remediation recommendations, and actively work with Third Partys and project managers on Information Security related findings to resolve issues as quickly as possible to help build and strengthen the relationship

• Support and coordinate Third Party Information Security Review processes, track Third Partys and services, escalate issues when necessary, negotiate with Third Party, business units, and legal team on the contractual security obligations, in addition to assisting with compliance and risk assessment programs which support corporate wide security programs, and participating in additional key control projects related to the overall enhancement of the assessment function

• Able to provide constant communication with involved stakeholders (within in the Bank and outside the Bank), as well as document and present information security risks in a clear, concise, and understandable manner at various management levels in the bank and/or to the Third Party

• Provide response and necessary artifacts for Regulatory queries across all regions (globally), in addition to supporting the team to improve the overall security control framework (e.g. new controls, enhancement of existing controls)

Skills You’ll Need

• Overall experience in Information Technology (IT) Security and Information Security (both technical and organizational controls), as well as Experience with ISO27001 standard and current industry and agency standards, best practices and frameworks including NIST, ENISA, ISO27001, ISO27017, SOC2, PCI, MITRE ATT&CK, Cloud Security Alliance (CSA), Cloud Controls Matrix (CCM), and CSS Consensus Assessment Initiative Questionnaire (CAIQ)

• Knowledge of technical and organizational controls regarding Information Security, and Risk Management principles

• General understanding of banking/financial industry and services and the ability to evaluate impact of security risks on banking/financial institutions

• Understanding of financial regulations or guidance’s which impact information security (e.g.: EU Cybersecurity Act, MAS & HKMA TRM, EBA Guidelines, DORA, GDPR, NYDFS, SoX, etc), as well as of Governance Risk and Control (GRC) tools, services, frameworks, and best practices

• Highly proficient in MS Office Suite - Microsoft Word, Excel, PowerPoint, etc. for reporting purposes

Skills That Will Help You Excel

• Excellent communication skills, both written and spoken

• Experience with (or Knowledge of) Shared Assessment Programs(e.g.: SIG, FSQS, etc) (a plus)

• Experience with (or Knowledge of) in Data Reporting including definition of metrics and data sources (a plus)

Expectations

It is the Bank’s expectation that employees hired into this role will work in the Jacksonville offic