Deutsche Bank Hiring For Corporate Functions InfoSec Architect [TISO] at Pune Full Time

Role Description
Currently DWS sources technology infrastructure, corporate functions systems [Finance, Risk, HR, Legal, Compliance, AFC, Audit, Corporate Services etc] and other key services from DB. Project Proteus aims to strategically transform DWS to an Asset Management standalone operating platform an ambitious and ground-breaking project that delivers separated DWS infrastructure and Corporate Functions in the cloud with essential new capabilities, further enhancing DWS highly competitive and agile Asset Management capability.
This role offers a unique opportunity to be part of a high performing team implementing a strategic future state technology landscape for all of DWS Corporate Functions globally.
The Lead Architect is responsible for a segment of the bank’s architecture. For that segment they develop architecture descriptions (current-state/future-state architectures and architecture roadmaps) which demonstrate how capabilities need to change to support the banks strategic intentions, and ensuring the buy-in of key stakeholders. They develop business cases, for high-level initiatives, approval, funding and prioritization to support architecture-related change. The Lead Architect produces and promotes architecture directives (policies, standards and practices) to guide sustainable solutions and to enable objective assessment of the alignment of architectures to the bank’s strategy. They direct architecture reviews to ensure alignment to the strategy, balancing benefits, opportunities, costs and risks.

The Lead Architect monitors the internal and external environment to identify and assess threats and opportunities to the organisation, and they initiate capability improvements to address those threats and opportunities. They build strong relationships with senior stakeholders (internal and external) and they facilitate open communication with stakeholders, including significant participation in architecture forums (e.g. architecture governance bodies) to evolve and mature the bank’s architecture.
The InfoSec Architect [known as Technical Information Security Officers (TISO) in DB/DWS] are the technology specialists for applications or infrastructure (hereafter referred to as IT assets), with an in-depth knowledge of the technologies used in the area they represent, as well as having a clear understanding of the IT security and control issues that may be in place. They act as the focal point for IT security matters within the Divisional and Functional Management’s work streams. Below is an overview of Tasks & Responsibilities of a TISO

• Execute information risk management functions
• Ensure systems and processes incorporate IS controls
• Support user recertification
• Act as an escalation point for IS related incidents
• Assist with IS related compliance management issues
• Ensure maximum level of user security awareness

What we’ll offer you
As part of our flexible scheme, here are just some of the benefits that you’ll enjoy

• Best in class leave policy
• Gender neutral parental leaves
• 100% reimbursement under childcare assistance benefit (gender neutral)
• Sponsorship for Industry relevant certifications and education
• Employee Assistance Program for you and your family members
• Comprehensive Hospitalization Insurance for you and your dependents
• Accident and Term life Insurance
• Complementary Health screening for 35 yrs. and above

Your key responsibilities

• In cooperation with the Business & Technology teams, the TISOs must ensure the compliance of their IT assets as described in the Information Security Policy
• The TISOs need to coordinate with the Business to ensure comprehensive information security risk management coverage of their applications. The TISOs will work together with the Business to perform risk assessments for their applications
• To ensure the execution of information security risk assessments and compliance evaluations for infrastructures assigned and own them.
• To ensure appropriate documentation of information security risk management in their area of responsibility. This includes major decisions, identified, and assessed risks as well as risk mitigation measures
• To advise the Application teams of various IT security policies and suggest remediation options where any policies are violated.
• Application State and Database State monitoring tasks – Lead security monitoring initiatives on applications from a technology perspective. Review, validate and sign-off testing.
• IT security aspects of connectivity to production environments. – Identify and remediate SSH Key gaps in prod environments.
• Public Key Infrastructure – IT security aspects and Recertifications. – Lead initiatives to implement PKI across production environments.
• Enterprise Security Monitoring – Security Configuration of the components of the Application, Databases and the Server infrastructure. – Drive the remediation of various non-compliant technology gaps in the application (Lead remediation of password strength etc.)
• Technology Aspects of Disaster Recovery testing exercise. – Validate app failover & failback steps. Review evidence and test results.
• Application Penetration testing – Review, validate and sign-off test evidence and test results.
• Technology Roadmap Compliance – Perform impact analysis and create business case to comply with DB defined technology standards/processes. (example. App migration from legacy to new, Server Virtualisation, database migration etc.)
• Capacity Management – Provide technical recommendations for infrastructure assets.

Your skills and experience

• Excellent communication and influencing skills
• Open minded
• Ability to work in fast paced environment and to take ownership of tasks
• Passion about sharing knowledge and best practices across teams and the organisation.
• Ability to work and communicate with virtual teams across the Globe in a matrix organization.
• Proven Technical skills – experience in working with Unix, Databases (Oracle / Sybase), Java/J2EE and related platforms.
• Ability to co-relate IT Security & Technology requirements with the Bank’s Security policies and standards.
• Good knowledge and grasp of IT Security & Risk in conjunction with technology.
• CISSP [Preferred], CISM qualifications
• Fluent English (written/verbal)

How we’ll support you

• Training and development to help you excel in your career
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs

About us and our teams
Please visit our company website for further information:
Our values define the working environment we strive to create – diverse, supportive and welcoming of different views. We embrace a culture reflecting a variety of perspectives, insights and backgrounds to drive innovation. We build talented and diverse teams to drive business results and encourage our people to develop to their full potential. Talk to us about flexible work arrangements and other initiatives we offer.
We promote good working relationships and encourage high standards of conduct and work performance. We welcome applications from talented people from all cultures, countries, races, genders, sexual orientations, disabilities, beliefs and generations and are committed to providing a working environment free from harassment, discrimination and retaliation.

Click to find out more about diversity and inclusion at Deutsche Bank.