Information Security Specialist (Embedded Risk Team in Chief Security Office)

• The Chief Security Office (CSO) is responsible for the creation, maintenance, and implementation of the information security strategy of Deutsche Bank Group
• CSO steers the measures derived from the information security strategy and provides guidance to employees regarding the identification, development, implementation, and execution of all processes which serve to reduce information security risk, to respond to incidents, and to establish appropriate policies and standards for information security management
• The Information Security Specialist (f/m/x) within the TDI CSO Embedded Risk Team (ERT) is responsible for driving Information Security Risk within the bank’s defined risk tolerance while supporting the overall security strategy
• The role acts as a key partner across all 3LoDs, ensuring effective governance, oversight, and Control linkage to Information Security Risk Findings
• The role requires strong communication, stakeholder engagement, risk analysis, and management reporting skills to support senior leadership decision making and effective risk reduction
• Providing end-to-end oversight of the Information Security Risk Finding portfolio by driving risk analytics, reporting, governance, stakeholder engagement, and continuous process improvement to support risk-informed decision-making across the organization
• Manage the Information Security Risk Finding portfolio, ensuring findings are linked to relevant controls from the DBs Control Inventory to identify recurring deficiencies and systemic control gaps
• Oversee and challenge control‑linkage exceptions, coordinating timely investigation, escalation, through resolution
• Analyse risk themes, control weaknesses, and remediation effectiveness to identify emerging risks, recurring issues, and cross‑divisional dependencies
• Develop risk portfolio analytics and management reporting, providing senior stakeholders with clear insights, recommendations, remediation status, and trend information to support risk-based decision-making
• Partner with stakeholders across all three Lines of Defense, acting as a key first‑line contact for Information Security Risk Findings and supporting effective governance
• Drive continuous process and tool improvement by identifying enhancement opportunities and translating operational needs into clear business requirements

Strong stakeholder management and influencing skills, with the ability to collaborate globally across business, technology, control functions, and all three Lines of DefenseProven ability to leverage AI tools to enhance productivity, optimize workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputsStrong analytical, organizational, and problem-solving capabilities, combined with experience in process improvement, business requirements definition, and effective challenge and escalationProven experience in risk analysis, identification of systemic control weaknesses, and interpretation of risk trends and dependenciesExcellent written and verbal communication skills, including the ability to translate complex risk information into concise, management‑ready insights and recommendationsExperience in preparing and presenting risk reporting, portfolio analytics, and status updates to senior management, governance forums, and working groupsStrong understanding of Information Security Risk Management, knowledge of Information Security framework like ISO 27001, finding management, and remediation governance