Divisional TISO and IS Control Implementation Enablement Lead

Role Description

The Divisional TISO is responsible for the management of IT Security in the DWS

Your key responsibilities

The Divisional TISOs responsibilities within DWS comprise:

• To work with the Principal TISO and the Divisional ISO to implement and maintain an appropriate level of protection within their respective area of responsibility by managing IT related IS Risks within the Risk Appetite defined by the ISR
• To manage the execution of IS Risk and compliance assessments for the assigned IT assets and processes
• To support the development and maintenance of required IT Security policies and procedures pertaining in accordance with the Information Security policies and procedures of DB Group and Divisional ISMS
• To steer or contribute to IT Security initiatives and programmes in their respective area of responsibility
• To manage their assigned TISOs and to assign these TISOs to business environments, processes, applications, databases and IT Security management topics. To be the first point of escalation for the assigned TISOs for all issues both within the CIO area and towards business Information Security management
• To ensure that all TISOs are trained and have completed the required trainings specific to their assigned role
• To plan and manage the information security relevant maintenance of the assigned IT Assets in the DB Group IT asset repository as required by the DB Group processes
• To ensure that infrastructure configurations are reviewed by the respective TISO and are in accordance with Information Security policies and procedures
• To contribute to the Information Security incident management process in the case of a Security breach, if requested
• To coordinate the delivery of all items requested during regulatory and internal Information Security related Audits
• To regularly assess and report on the operational effectiveness of the IT Security related activities and processes
• To contribute to the annual reviews of the implementation of the Divisional ISMS.

Your skills and experience

• Experience working in the financial industry (10+ years) and Information Security Area
• Broad understanding of data and its usage within financial industry including reference, trade, market and risk data
• Ability to assimilate large quantities of information in short periods of time
• Understanding and experience of the SDLC
• Non-Financial Risk Management and Technology Risk Management skills
• Excellent verbal and written communication skills
• Ability to relay complex information to a variety of end users from developers to senior managing directors within the business.
• Proactively, initiate, develop and maintain effective working relationships with senior management, team members and the business

Business Competencies:

• Change Leadership (Experienced)
• Managing Security (Experienced)
• Customer/stakeholder Relationship Management (Experienced)

Technical Competencies:

• Business/functional analysis (Experienced)
• Project Management skills (Experienced)