Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
- Gratuity calculator
  
  Check your gratuity amount
- HRA calculator
  
  Check how much of your HRA is tax-free
- Salary hike calculator
  
  Check your salary hike
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 1K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

Add office photos

Employer? Claim Account for FREE

DWS Group & GmbH Co KgaA

Compare

4.0

based on 19 Reviews

144 DWS Group & GmbH Co KgaA Jobs

Technical Analyst ITAO, AVP

DWS Group

4.0

based on 19 Reviews

2-4 years

Pune

1 vacancy

Technical Analyst ITAO, AVP

DWS Group & GmbH Co KgaA

posted 1mon ago

Job Role Insights

Flexible timing

Key skills for the job

Consulting Legal Advisory Clinical Data Management Risk Management Information Security Software Asset Management

+ 4 more

Job Description

Job Description

Job Title- Technical Analyst ITAO, AVP

Location- Pune, India

Role Description

The successful candidate is expected to have at least 10+ years experience in IT, preferably with Asset Management Business Applications and Processes.
The IT Application Owner (ITAO) has sound IT risk management skills. They follow one of several possible service delivery approaches, acknowledge interference with the IT application s life cycle and assist with incorporating the adopted approach into best practice.
The focus is on applications moving onto cloud. Here you support tracking of the application control status and help application dev-teams with practical advice.
Make sure that all steps in Identity Access Management cycle (on-boarding, recertification, off-boarding) are compliant against DB Policies and application is on-boarded to central tools.
The ITAO is aware of the gap in the current infrastructure solutions and where industry innovations are along the maturity lifecycle. They work with application stakeholders to improve the infrastructure, ensuring compliance with the technical roadmap.
The ITAO has a sound knowledge of development methodologies and the IT policies necessary to perform effectively in the organisation, aligned to the bank s appetite for risk.
The ITAO acts to improve safety and security of the application, compliance with regulations, policies and standards, enhance operational readiness, and ease maintenance of the environment for delivering change into production.
The ITAO supports the bank s audit function in the remediation of audit points and self-identified issues in order to reduce risk.
The ITAO is responsible for producing and maintaining accurate documentation on compliance with methodologies, IT policies and IT security requirements.
The ITAO interacts with and influences colleagues on the governance of IT platform reliability and resilience
ITAOs will also be responsible for Application Decommissioning
ITAOs will be driving activity that helps incidents reduction against an application
Support compliance on all steps of SDLC process and make sure that all SDLC controls are green.
You support the team s role as key contact for all security controls in the software delivery process and ensure that the security controls are evidenced by driving automated evidence.
You are consulting with the ITAO community, information security specialists in our CSO organization, and other infrastructure teams like the ORR/SDLC teams.

Job Description

The Lead Technologist supports the technical infrastructure required to supply IT services to the bank. They are involved in the strategy, design, development, and deployment of IT solutions. They are able to troubleshoot complex issues, being aware of overlapping and different technology areas. Based on their business knowledge, they are able to identify where IT designs can be strengthened and provide value to the businesses. They are responsible for providing detailed technical feedback into the Engineering function to deliver more robust IT solutions. They understand in detail, how IT needs to be supported and can create appropriate processes and controls which ensure IT failings are captured and remediated to ensure stability. They provide technical direction on all related IT platforms and are considered technical experts for level 3 support in outage coordination. The Lead Technologist is counted upon to provide technical guidance and recommendations for complicated business IT problems. They embrace a Continuous Service Improvement approach to drive efficiencies and remove repetition to streamline support activities, reduce risk, and improve system availability.

What we ll offer you

As part of our flexible scheme, here are just some of the benefits that you ll enjoy

Best in class leave policy
Gender neutral parental leaves
100% reimbursement under childcare assistance benefit (gender neutral)
Sponsorship for Industry relevant certifications and education
Employee Assistance Program for you and your family members
Comprehensive Hospitalization Insurance for you and your dependents
Accident and Term life Insurance
Complementary Health screening for 35 yrs. and above

Your key responsibilities

Enterprise IT Governance Responsible for review of current and proposed information systems for compliance with the organisations obligations (including legislation, regulatory, contractual and agreed standards/policies) and adherence to overall strategy
Information security Communicates information security risks and issues to business managers and others. Performs basic risk assessments for small information systems. Contributes to vulnerability assessments. Applies and maintains specific security controls as required by organisational policy and local risk assessments. Investigates suspected attacks. Responds to security breaches in line with security policy and records the incidents and action taken.
Information content publishing Understands technical publication concepts, tools and methods and the way in which these are used. Uses agreed procedures to publish content. Obtains and analyses usage data and presents it effectively. Understands, and applies principles of usability and accessibility to published information.
Business risk management Investigates and reports on hazards and potential risk events within a specific function or business area.
Continuity management Implements and contributes to the development of a continuity management plan. Coordinates the assessment of risks to the availability, integrity and confidentiality of systems that support critical business processes. Coordinates the planning, designing, and testing of maintenance procedures and contingency plans.
Data management Assists in providing accessibility, retrievability, security and protection of data in an ethical manner.
Methods and tools Provide support on the use of existing method and tools. Configures methods and tools within a known context. Creates and updates the documentation of methods and tools

Overall Responsibilities Summary

Make sure that all critical activities in application are monitored and logs are reviewed.
Ensure appropriate controls onboarded and implemented where appropriate.
Make sure that all steps in Identity Access Management cycle (on-boarding, recertification, off-boarding) are compliant against DB Policies and application is on-boarded to central tools.
Manage Internal and external application audits and Audit issue remediation activities.
Completion of regular/recurring assessments
Timely response to audit regulatory requirements with evidence, were compliant.
Make sure that infrastructure is compliant and has up-to-date patches.
Plan for Application Hardware / Software / License upgrades or migration activities to align to the compliant platforms.
Keep up-to-date DR Test Plan and manage regular DR Tests
Manage application capacity forecasting and monitoring.
Manage any IT Security incidents that may occur in the application.
Support compliance on all steps of SDLC process and make sure that all SDLC controls are green.
Application Decommissioning
Drive incidents reduction against an application
Planning/Organizing Able to manage work but also to make the estimate, scheme in detail, work on deployment plans and manage deadlines.
Manage the technical roadmap of the application (technology roadmap compliance), estimate/budget capacity needed.
Expertise in Planning and execution of Releases, Changes, Patches.
Exposure of handling L3 role, incident analysis, patch preparation and implementation.
Skilled individual to interact with L2 teams for incident and problem management cases.

Your skills and experience

Degree-level IT and/or information security qualification, or equivalent experience in
Information Security and IT Security
Experience in Software Development Lifecycle (SDLC) - from idea to production to understand our customer journey, these mostly application owners, business ISOs and development teams
GCP-Cloud foundation knowledge
General understanding of current security industry standards, best practices, and/or frameworks i.e. NIST, ENISA, ISO27001, OWASP
Problem-solving and analytical skills with the ability to oversee complex processes
Ability to educate a technical and non-technical audience about various security measure
Excellent communications skills and very service oriented and customer friendly behaviour even in stressful situations
Self-driven behaviour
Fluent in English (written/verbal)

Preferable

Knowledge of information security tools e.g., security scan and testing tools
Understanding of cloud engineering and native security features to support the migration path for applications onto the cloud environment
Firm understanding of DevSecOps and the banks shift left agenda to integrate security in the software development lifecycle as earliest as possible.
ISO or ITAO certification (for internals only)

How we ll support you