Technology Risk Manager Information Technology Controls

Role Description

• Corporate Banking is a technology centric business, with an increasing move to real-time processing, an increasing appetite from customers for integrated systems and access to supporting data. This means that technology is more important than ever for the business.
• Deutsche Bank is one of the few banks with the scale and network to compete aggressively in this space, and the breadth of investment in this area is unmatched by our peers. Joining the team is a unique opportunity to help rebuild the core of some of our most mission critical processing systems from the ground-up
• Our Corporate Bank Technology team is a global team of 3000+ Engineers (and growing!) across 30 countries. The primary businesses that we support within Corporate Bank are Cash Management, Securities Services, Trade Finance and Trust & Agency Services. CB Technology support these businesses through CIO aligned teams and also by 'horizontals' such as Client Connectivity, Surveillance and Regulatory, Infrastructure, Architecture, Production and Risk & Control.
• In addition to providing cash management services like Payments to our customers, Corporate Bank is the payment service provider for the entire Deutsche Bank organization. As such, we have been tasked with ensuring technology and security risk for payments is within risk tolerance bank wide.
• We are looking for a Information Technology lead to join our Risk and Control team to be responsible for range of Information Technology Controls such as Technology Roadmap Compliance(TRC) which is to do with managing technology End of Life, Ensuring essential maintenance such as Patching various technologies, governing proactive remediation planning and upcoming risks. There is other wide variety of overlapping scope including information security aspects and related Audit finding remediation SME support w.r.t. Information Technology Controls. This involves in summary, Hands-on technical data analysis and leading IT Controls Uplift remediations activities and overall ensuring technology controls are implemented effectively and sustainably.
• The Risk and Control Team ensures the Bank's information control priorities are effectively implemented across Corporate Bank Technology. The team offers dedicated support for each Chief Information Officer (CIO) business line, advisory services for control responses, and program management services for broad control uplifts. The team's mission is to reduce the organization's technology risk exposure by implementing key bank controls, ensuring appropriate and timely resolution of audit issues, and participating in the Bank's design of control implementations. Therefore, your role would be integral in supporting the front-line management in identifying, assessing/measuring risks, identifying remediation actions, and monitoring risks.
• Deutsche Banks Corporate Bank division is a leading provider of cash management, trade finance and securities finance. We complete green-field projects that deliver the best Corporate Bank - Securities Services products in the world. Our team is diverse, international, and driven by shared focus on clean code and valued delivery. At every level, agile minds are rewarded with competitive pay, support, and opportunities to excel.
• You will work as part of a cross-functional agile delivery team. You will bring an innovative approach to software development, focusing on using the latest technologies and practices, as part of a relentless focus on business value. You will be someone who sees engineering as team activity, with a predisposition to open code, open discussion and creating a supportive, collaborative environment. You will be ready to contribute to all stages of software delivery, from initial analysis right through to production support.

Your key responsibilities

At Risk & Control Governance team, you will be responsible for leading activities involving Information Technology controls and related control uplifts remediation activities/governance. You will partner with CIO teams and Risk Leads to ensure overall IT Controls risk posture for the area is improved. Able to liaise with Risk leads, senior stakeholders and technology/process owners on overall IT Controls Book of Work, governance/reporting, technical data analysis, process improvements and tracking of key deliverables for control uplifts.

To be successful in this role the below are key responsibilities.

• Control Uplift Remediation: Ensures Information Technology and Information Security risk remediation programs are initiated and executed in line with Deutsche Bank Risk and Program standards and as per CB Tech IT Controls operating model and target thresholds.
• Reporting and Control data analysis: Will be responsible for internal and external data source effectiveness by analysing data gaps related to control uplifts, emerging pattens of compliance deterioration by technology, remediation responsibilities governance and escalation where appropriate.
• Team Management: To effectively manage IT Controls team and work with policy owners and control owners to improve processes and tooling.
• Risk Advisory: Provide assistance to application teams on Information Technology controls implementation requirements and develop all tools/training materials/advisory sessions to drive remediation
• Regulatory and Audit management support: Provide analysis and supporting evidence where required pertaining to IT Controls to improve quality of audit evidence submission for critical audit response/closure
• Continuous Improvement: Drive proactive risk culture within the organization. Work with the control owner teams to identify and resolve potential issues in Information Technology and control design. Identify and resolve implementation issues in collaboration with control owners.

Your skills and experience

• Minimum 15 years of experience within Information Technology related roles in Banking major or similar complexity scale global conglomerates
• Extensive technical knowledge and hands-on experience in end to end SDLC management, IT infrastructure knowledge including but not limited to Networks/Cloud computing/Servers and related tools such as configuration management databases
• Excellent Project management credentials with team management/leadership traits
• Should have experience with hands-on data analysis and data problem solving using standard tools
• Should have good knowledge on Audits process and experience supporting it
• IT Application Owner (ITAO) experience preferred with demonstrable familiarity with concepts of Technology Roadmap Compliance, Patching lifecycle knowledge especially Java, Oracle, Disaster Recovery planning and testing
• Familiarity on Patch Vulnerability Governance process and CVE advisory process for vulnerabilities
• Advanced verbal and written communication skills to present ideas and concepts effectively at senior management level
• Desirable experience in automating manual tasks or improving data collection to reporting processes