Deutsche Bank India | Divisional Risk and Control Specialist, VP

Responsibilities

• We are seeking an experienced technology risk professional to play a key role in our Proactive Risk Testing Programme, delivering rigorous, risk-based assessments across this landscape.
• The role requires the ability to develop a deep understanding of applications and their end-to-end architecture, critically evaluate the design and effectiveness of implemented technology controls, and identify both existing and emerging IT and Information Security risks.
• Lead and deliver risk-based, end-to-end IT and Information Security assessments across the Corporate Bank (CB) Technology landscape, independently assessing the design, implementation and operating effectiveness of key controls.
• Assess technology lifecycle risks and controls including design, development and production considering aspects such as access management, security, operations and resilience.
• Identify cross-application and thematic risks, emerging technology threats, control automation opportunities and opportunities to use data analytics and continuous monitoring to improve assurance coverage.
• Partner with Technology Application Teams, Architects, Engineering, Information Security, Control Owners, the Divisional Control Office, Group Audit and other stakeholders to promote transparency and sustainable risk mitigation.
• Contribute to the ongoing enhancement of risk-based testing methodologies, standards, documentation and quality assurance, while providing guidance and technical coaching to colleagues where required.
• Working closely with senior technology, business and control stakeholders, you will translate complex technical observations into clear risk insights, strengthen the testing strategy and drive sustainable improvements that enhance the resilience, security and control environment of mission-critical technology services.
• Develop an in-depth understanding of business services and their supporting technology, including application and platform architecture, infrastructure, databases, operating systems, cloud services, networks, interfaces, APIs, data flows, batch and real-time processing, and third-party dependencies.
• Perform technical deep dives across applications, platforms, databases and infrastructure to identify and assess existing and emerging IT and IS risks, control weaknesses, root causes, systemic themes and potential impacts on confidentiality, integrity, resilience and regulatory compliance.

Your skills and experience

• Extensive experience in IT/Cyber security assessments, technology risk, information security, controls assurance or related discipline, including leading complex reviews in a large, regulated organization.
• In-depth understanding of enterprise technology and application architecture, including cloud and on-premises infrastructure, databases, operating systems, networks, APIs, middleware, data integration and third-party services.
• Experience applying recognized frameworks and standards such as COBIT, NIST, ISO 27001, ITIL and relevant regulatory expectations; professional certifications such as CISA, CISSP, CRISC, or equivalent is desirable.
• Strong analytical and problem-solving capability, with the confidence to challenge senior stakeholders and translate complex technical matters into concise, risk-based findings and practical remediation actions.
• Excellent written and verbal communication, stakeholder management and influencing skills, with the ability to work independently, manage competing priorities and deliver high-quality outcomes.
• Experience working in Agile and DevOps environments; knowledge of Google Cloud Platform (GCP) and its control environment would be an advantage.
• Strong knowledge of IT General Controls and Application Controls, cyber security, secure software development, identity and access management, privileged access management, network and cloud security, vulnerability management, data and cryptographic protection, security monitoring, incident management, operational resilience and technology lifecycle management.

Deutsche Bank

Deutsche Bank is a leading German bank, founded in Berlin in 1870 and headquartered in Frankfurt. Its businesses span the Corporate Bank, the Investment Bank, the Private Bank and asset management through DWS, serving companies, institutions and individuals worldwide.

Deutsche Bank has been present in India since 1980. Besides its branch banking business, its Indian centres in Mumbai, Pune, Bengaluru and Jaipur support the group globally in technology, operations and finance. Finance professionals typically work in financial control, product control, regulatory reporting, tax, internal audit and risk.

• Industry: Banking and financial services
• Headquarters: Frankfurt am Main, Germany
• In India: Branch banking plus large global capability centres in Mumbai, Pune, Bengaluru and Jaipur