Information Security Specialist (Embedded Risk Team in Chief Security Office)

Join Deutsche Bank's Chief Security Office (CSO) as an Information Security Specialist. In this role, you will drive Information Security Risk within the bank's defined risk tolerance while supporting the overall security strategy. You will provide end-to-end oversight of the Information Security Risk Finding portfolio, manage risk analytics and reporting, and partner with stakeholders across all three Lines of Defense. Strong communication, stakeholder engagement, risk analysis, and management reporting skills are essential for this position.

• Driving Information Security Risk within the bank's defined risk tolerance while supporting the overall security strategy.
• Providing end-to-end oversight of the Information Security Risk Finding portfolio by driving risk analytics, reporting, governance, stakeholder engagement, and continuous process improvement.
• Managing the Information Security Risk Finding portfolio, ensuring findings are linked to relevant controls from the DBs Control Inventory to identify recurring deficiencies and systemic control gaps.

• Strong stakeholder management and influencing skills, with the ability to collaborate globally across business, technology, control functions, and all three Lines of Defense
• Proven ability to leverage AI tools to enhance productivity, optimize workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs
• Strong analytical, organizational, and problem-solving capabilities, combined with experience in process improvement, business requirements definition, and effective challenge and escalation
• Proven experience in risk analysis, identification of systemic control weaknesses, and interpretation of risk trends and dependencies
• Excellent written and verbal communication skills, including the ability to translate complex risk information into concise, management-ready insights and recommendations
• Experience in preparing and presenting risk reporting, portfolio analytics, and status updates to senior management, governance forums, and working groups
• Strong understanding of Information Security Risk Management, knowledge of Information Security framework like ISO 27001, finding management, and remediation governance