Head Information Security For DXC, Kyndryl and Google, VP

Job Description

Role Description In this role, you will be accountable for driving Information Security (Kyndryl, DXC and Google) for Tier 1 Vendors within Group Technology. This entails ensuring Vendor partners adhere to Deutsche Bank policies, framework and all contractual obligations including SLAs around the IS domain. You will be responsible for maintaining complete governance, oversight, and risk management related to Information Security domain and you will be expected to be an SME in different tech stacks across Technology Infrastructure including Mainframe with deep understanding of security tooling to manage IS processes and controls. You will oversee and own complete responsibility to ensure all contracted obligations are met by these vendor partners on all accounts related to IS domain. In addition, you will be accountable to drive end-to-end risk management life cycle for IS related topics for these vendor partners and this will include ownership for audit remediation where gaps are identified on topics such as Identity Access Management, Security Monitoring, Security Tooling, VAPT, CBVA, gaps against minimum control requirements originating from DB policies/ISRV (Information Security Risk for Vendors). Lastly, 100% adherence to vendor control risk framework and cloud control frame from IS perspective. Your key responsibilities Vendor compliance to Deutsche Bank policies, 3rd party risk management framework including contractual obligations around IS controls Conducting/facilitating in depth security assessments of existing vendors such as Google, DXC and Kyndryl and ensuring that vendor partners are using DB security tools and comply to DB requirements Conducting Platform security reviews, information security state monitoring, managing vendor SLA compliance as per contractual obligations related to security policies and standards Remain accountable ensuring end-to-end risk management across different IS risk types for inscope vendors Maintaining comprehensive vendor risk register and track remediation efforts Providing SME guidance and support to vendors on improving their security posture Staying informed about the latest security threats and trends affecting third-party services Conduct regular reviews and audits of vendor security practices Report on vendor security performance to senior management Actively partner with the delivery, Tech operations and infrastructure teams to deliver operational excellence Internally assess, evaluate, and make recommendations to management regarding the adequacy of the security controls for the Company's information and technology systems Present assessment results and options to the DB stakeholder and discuss steps for resolution Own and remediate audit findings/risk remediation efforts that related information security domain Your skills and experience Minimum 10-15 yrs of versatile experience in the information security domain with 2 years of being in the similar or larger role Proven experience and knowledge in information security with deep understanding of different technologies including Cloud operating framework SME on security frameworks and standards such as ISO 27001, DORA, NIST, GDPR etc Excellent problem-solving and analytical skills Relevant certifications such as CISSP, CISM, or CISA are preferred Analytical skills to evaluate risks and control processes Strong communication skills both verbal (incl. presentation skills) or written and Ability to operating complex operating environment and managing senior stakeholders