CRO - Information Technology & Security Risk Lead – Operational Risk - VP

Details of the Division and Team:    

An Information Technology & Security Risk Lead to join the second line of defence (2LoD) Operational Risk Management (ORM) team in Singapore. This role reports to the Asia Pacific (APAC) Regional Head of Information Technology and Security Risk.

Should have a proven depth of knowledge and keen interest of Information Security and Technology and their application in large financial institutions.

Working with other global and regional team members, the role will input subject matter expertise and drive innovative approaches in applying risk management in an evolving threat environment. The team has a global footprint in Frankfurt, Singapore, London, Mumbai, New York and Jacksonville.

What we will offer you:

A healthy, engaged and well-supported workforce is better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That's why we are committed to providing an environment with your development and wellbeing at its center.

You can expect:

• Flexible benefits plan including virtual doctor consultation services

• Comprehensive leave benefits

• Gender Neutral Parental Leave

• Flexible working arrangements

• 25 days of annual paid leave, plus public holiday & Flexible Working Arrangement

Your key responsibilities:

• Support the regional head and contribute to all activities performed in APAC region as the 2LoD for Information Technology and Security Risk.

• Provide data and analytics reporting to support the team in monitoring the Information Security and Technology Risk Appetite, breaches and remediation.

• Where required support the implementation of automated data and analytics reporting process.

• Support the team delivery of Operational Risk Management (ORM) priorities such as risk & control assessments, scenario analysis, risk appetite.

• Monitor and challenge 1LoD Risk and Control Self-Assessments (including results of 1LoD control testing/assurance).

• Perform 2LoD control assurance through targeted reviews of areas of concern.

• Gain an understanding and be able to articulate key Information Security and Technology regulatory requirements across APAC and their impact and implementation into the Information Security and Technology Risk Framework.

• Represent the Information Technology and Security Risk function in internal governance councils / committees, with Group Audit (3LoD) and regulators as required.

Your skills and experience:

• University degree in Computer Science, Information Technology, Information Security, Risk Management or related degree

• Minimum 8 years of experience in Information Technology or Information Security with experience in the financial industry

• Experience in Technology Risk Frameworks and knowledge in Information Technology and Security industry regulatory standards and/or Risk Frameworks

• Understanding and experience of technology from either a support, development or business analysis perspective.

• Some level of technical understanding and training either as a data analyst, developer, business analyst or project manager

• Experience of technology coding e.g. python, java

• Understanding of IT controls: SDLC, managing technology obsolescence, disaster recovery

• Knowledge of Digital Transformation, Private and Public Cloud, AI tooling

• Relevant professional certifications e.g. CISSP, CISA, CISM, CRISC, CGEIT, CCSK, ITIL, ISO 27001 Lead Auditor or similar

• Experience of working in large global teams yet comfortable working independently without day-to-day oversight and steer.

• Strong communication skills

• Proficient (Read, Write, Speak) in Mandarin on Business level for engagement with Chinese regulator is required

Role is required to be performed on-site at One Raffles Quay office. Relevant vaccination requirements may apply.

How we'll support you:

• Flexible working to assist you balance your personal priorities

• Coaching and support from experts in your team

• A culture of continuous learning to aid progression

• A range of flexible benefits that you can tailor to suit your needs

• Training and development to help you excel in your career

About us and our teams:

Deutsche Bank is the leading German bank with strong European roots and a global network. click here to see what we do.

Deutsche Bank & Diversity

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.