Information Security Analyst - Risk Assessment Methodology - Deutsche

A Passion to Perform. It's what drives us. More than a claim, this describes the way we do business. We're committed to being the best financial services provider in the world, balancing passion with precision to deliver superior solutions for our clients. This is made possible by our people: agile minds, able to see beyond the obvious and act effectively in an ever-changing global business landscape. As you'll discover, our culture supports this. Diverse, international and shaped by a variety of different perspectives, we're driven by a shared sense of purpose. At every level agile thinking is nurtured. And at every level agile minds are rewarded with competitive pay, support and opportunities to excel.

Overview

Information Security Risk Assessment (ISRA) team, as part of Chief Information Security Office (CISO), is globally organised with major hubs in Germany, United Kingdom, United States of America and Singapore and gives advice on information security related questions in day to day business and projects (for example sourcing and acquisition initiatives). Describing risks and the possible mitigation steps is also supported. ISRA are responsible for the design and implementation of the Information Security (IS) Risk Assessment Methodology as well as the Quality Assurance of the reviews and process.

A new program is underway to implement a solution that focuses on the management and reporting of ISRA. As a Business Analyst/Information Security Risk and Control Analyst you will have strong requirements gathering experience to asset work stream leads to implement a solution focusing on the management and reporting of IRSA.

Key Responsibilities

- Develop and update the Information Security Risk Assessment Methodology.
- Implement the Risk Assessment Methodology to international best practice and standards.
- Advice on compliance related to information security.
- Facilitate/conduct IS Risk Assessment Methodology Design workshops with various business stakeholders.
- Work with the project team to implement the agreed design.
- Provide work stream status update reports to Program Management.
- Maintain information security related documents (including design concept, blueprint, test support evidence, status reports).

You will have:

- Experience with information security management, ideally certified in; Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), or Certified Information Systems Manager (CISM).
- Experience with risk management methodologies.
- Knowledge and experience in information security standards.
- General financial markets experience.
- Experience working on a large and complex programme.

You will be:

- Strong in both Excel and PowerPoint.
- An effective negotiator.
- Strong in both written and verbal forms of communication.
- Able to grasp complex issues quickly.
- Able to understand organisational dynamics.
- Pragmatic and professional.
- Able to establish and meet deadlines and to establish clear priorities quickly.

Deutsche Bank is an equal opportunity employer who seeks to recruit and appoint the best available person for a job regardless of marital/civil partnership status, sex (including pregnancy), age, religion, belief, race, nationality and ethnic or national origin, colour, sexual orientation or disability.

Please let us know if you require any adjustments to enable you to apply or attend an interview. If you would like to discuss your requirements, or have any concerns about the application process, please contact your recruiter.

Please note that for the duration of this assignment you will be working as an external resource engaged by Resource Solutions based on site at Deutsche Bank.