ITAO - Directory Services, AVP

You are working in the team Chief Security Office Identity & Authentication Services with focus on Directory Service related products for Deutsche Bank globally.

You will be seen as custodian of our respective application, the ITAO is that individual in the bank, who is responsible for ensuring that our application portfolio is compliant daily, meets the banks standards and somehow drives towards achieving a risk-free security and safeguarding for the applications.

You have experience working in dynamic, structured teams and has strong knowledge managing the Technology Risk, Information Security, and Infrastructure for our applications.

The Directory linked applications mainly relate to Active Directory and associated compliance applications (SCOM, DFS, Quest Change Auditor\GPOAdmin\Intrust\Recovery Manager for Active Directory), we also have a large Entra ID estate that requires the same governance.

Your key responsibilities

• Manage Internal and external application audits and Audit issue remediation activities.
• Make sure that infrastructure is compliant and has up-to-date patches. Plan for Application Hardware / Software / License upgrades or migration activities to align to the compliant platforms. Keep up-to-date DR Test Plan and manage regular DR Tests. Manage application capacity forecasting and monitoring. Manage any IT Security incidents that may occur in the application.
• Make sure that all critical activities in application are monitored and logs are reviewed. Make sure that application code/binaries/facilities are scanned and tested to find security flaws. Make sure that all found flaws are addressed and remediated in time.
• Make sure that all steps in Identity & Access Management cycle (on-boarding, recertification, off-boarding) are compliant against DB Policies and application is on-boarded to central tools.
• Identify and manage the risks and issues associated with the application(s) and escalate appropriately.
• Provide Operational Readiness of application. Support compliance on all steps of SDLC process. Make sure that all SDLC controls are green.
• The position has potential scope to enhance your technical knowledge\experience within our application portfolio.

Your skills and experience

Technical and personal skills

• Bachelors degree in computer science or comparable and at least more than 4 years hands-on experience working in Identity & Access Management
• Experience/knowledge in Application Security and Monitoring
• CyberArk. Onboarding, remediation coordination.
• External Vulnerabilities and Internal Vulnerabilities remediation coordination.
• Application Penetration: onboarding, testing, remediation coordination.
• Experience/knowledge in Audit and Regulatory Internal Compliance
• Group Audit and External Audit and Regulator Support (E&Y, MAS, SOX).
• Audit review. Application Documentation maintenance; Proactive remediation, Self-Identified Issues.
• Experience/knowledge in Infrastructure and Product Logistics
• Disaster Recovery.
• Technology Road Map Compliance. Migration and decommission. Infrastructure Configuration, Design, Procurement.
• Run Architecture - Capacity management. Server, Database Activation.
• Knowledge of SDLC and Process Management
• SDLC Governance. Tooling. Onboarding management and issue coordination.
• Incident- and Problem Management, Unplanned maintenance.
• Operational Readiness.
• Knowledge in Vendor Management
• Vendor Risk Management assessment.
• Scheduling catch-up meeting with vendors
• Knowledge in Data & Records Management
• Archiving compliance
• GDPR
• Technical knowledge\experience in the previously mentioned applications very advantageous.
• Language skills: Excellent spoken and written communication skills in English, German language skills welcome.