Information Security Risk Associate

Job Title Information Security Risk Associate

Corporate Title Associate

Location Jacksonville, Florida

Overview

As a risk type specialist for Information Security (IS), you join the Risk Management team in Jacksonville reporting to the Americas Head of Information Security & Information Technology (IT), Director. Deutsche Bank applies a three Lines of Defense (LoD) model to manage its financial and non-financial risks. Within this approach, the second LoDs define and maintain an effective risk management framework for their risk types with minimum control standards and a related governance structure. Gaining and maintaining subject matter expertise is considered critical in the current environment based on an increasing thread landscape with the ability to effectively communicate analytical results and challenge technical experts in the Chief Security Office and Technology Data and Innovation function.

What We Offer You

• A diverse and inclusive environment that embraces change, innovation, and collaboration
• A hybrid working model, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days
• Employee Resource Groups support an inclusive workplace for everyone and promote community engagement
• Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits
• Educational resources, matching gift, and volunteer programs

What You’ll Do

• Contribute to the Information Security risk type reporting on the risk profile and risk appetite at US Regional, Country & Legal Entity level; prepare material for US governance fora
• Support Americas Head IT & IS by analyzing US Divisional exposure to the risk type through close coordination with Risk Type Controller global central team on minimum control standards as well as deep analysis into divisional application-level details to challenge the 1LODs risk exposure
• Support the monitoring of divisional adherence to minimum control standards and identify strengths and weakness of 1LoD controls by performing structured controls testing against design and operating effectiveness
• Identify and assess risks associated with control weaknesses, including the impact of emerging risks on business impact
• Conduct the Risk and Control Assessment by reviewing and challenging LE and Divisional variances to the global risk profile and discuss and resolve with 1LOD
• Contribute to Regulatory Responses and information requests

Skills You’ll Need

• Bachelor’s degree (ideally Business Administration, Finance, Data Science, Computer Science)
• Experience in information security (both technical and organizational requirements) ideally with experience in the finance industry, consulting, or a technology company
• Working knowledge of relevant assessment frameworks and/or standards (e.g., ISO/IEC 27000 Series, NIST, COBIT, SOC2 ) is a plus
• Relevant professional certifications are a plus: e.g. CISSP, CISA, ISO27001 or similar
• Proficient in MS Excel, Tableau and or other reporting / visualization tools

Skills That Will Help You Excel

• Analytical thinking, relationship builder, attention to detail
• Understanding of risk management principles, experience in risk management and experience in regulatory frameworks is a plus

Expectations

It is the Bank’s expectation that employees hired into this role will work in the Jacksonville Florida office in accordance with the Bank’s hybrid working model.

Deutsche Bank provides reasonable accommodations to candidates and employees with a substantiated need based on disability and/or religion.

The salary range for this position in Jacksonville, FL is $60,000 to 86,000. Actual salaries may be based on a number of factors including, but not limited to, a candidate’s skill set, experience, education, work location and other qualifications. Posted salary ranges do not include incentive compensation or any other type of remuneration.