Information Security Specialist

Job Title: Information Security Specialist

Corporate Title: AVP

Location: Pune, India

Role Description

• The Security Compliance & Risk Team is responsible for the overall security posture and risk governance across all End-User products and services.  As Information Security Specialist, you will be responsible for collaborating with the EUC Product and Operations Manager, your respective team and affiliate stakeholders to respond to various demands in the end user asset management space.  This is a dynamic role which will also entail leading collaboration and driving forward technology needs and responding to various escalations, inquiries and responding to audits and regulatory questionnaires.
• You’ll be a well-seasoned technologist with 10+ years of experience and will join a global team of other expert individuals that collectively make a large impact to our bank through creativity, innovation, and passion.
• In summary, the Information Security Specialist is responsible for delivering specific aspects of the risk, security, and control strategy for End User Computing Security, Risk and Compliance Team.

What we’ll offer you

As part of our flexible scheme, here are just some of the benefits that you’ll enjoy

• Best in class leave policy
• Gender neutral parental leaves
• 100% reimbursement under childcare assistance benefit (gender neutral)
• Sponsorship for Industry relevant certifications and education
• Employee Assistance Program for you and your family members
• Comprehensive Hospitalization Insurance for you and your dependents
• Accident and Term life Insurance
• Complementary Health screening for 35 yrs. and above

Your key responsibilities

• Must have good exposure to relationship and project management skills.
• Monitoring and tracking risk and control activities, risk-based control reporting of key issues, KPIs, and KRIs as it pertains to your book of work.
• Respond to global regulatory and infosec certification queries like ISO 27001, COBIT, RBI, MAS, EBA, BaFin, FED, others.
• The ability to multitask, prioritize work and adapt during sometimes pressured situations.
• Ability to effectively work with business users, developers and other technology colleagues outside of your direct team, across a broad range of business functions and at all levels of the organization
• Experience of working on coordinating activity related to Technology questionnaires received from regulators.
• Ownership of the End User Asset Governance activities, like monitoring end user device management processes across all regions.
• Manage and own the Customer services relationship on regional level.
• Acts as a SME to central teams, procurement functions and senior management.
• Ability to monitor, manage, develop, and drive performance within the team.
• Focus on expediting audit points and findings to successful outcomes and closure.
• Ensure Customer Services adheres to bank wide regulatory and compliance requirements and risk frameworks.
• Data Quality management - identifying, reporting, analyzing, and resolving issues impacting the timeliness, accuracy or completeness of risk measures using the Department’s and Bank’s framework for Data/Issue management by collaborating across teams and stakeholders.
• Be the subject matter expert for End User Device management risks and the Operational & Control processes
• Owns and maintain policy procedures or KODs on company policy portal in accordance with regulator and information security guidelines.
• Measure and Track compliance of global local customer services in accordance with Procedures on policy portal.
• Maintain central control of Network access of end user devices on bank's network.
• Data Analysis, Global Regulatory and Management Reporting.
• Proactive approach towards Process Automation.

Your skills and experience

• ServiceNow Hardware Asset Management Design, Implementation and Operation.
• Excel reporting expert, must be able to write intermediate level SQL queries, Powershell
• Knowledge of any of the control’s framework like COBIT, ISO 27001:2022 or NIST
• Sound knowledge on Windows OS, ServiceNow Operations.
• Power platform and automation work experience
• MS Intune, Service Graph API
• Excellent verbal and written communication skills
• Strong analytical and problem-solving skills.
• Strong interpersonal skills: ability to partner with internal partners and leverage internal resources
• Experience in preparing key operating documents/procedures/policies.
• Able to cope well under pressure and meet deadlines
• Eye for detail and willingness to question current state practices
• Independent, self-motivated and a team player.
• Strong capacity to assimilate other stakeholders’ perspectives and fast learning abilities
• Proficient in MS Office applications
• Ability to apply regulatory guidance to review processes in absence of written policy
• Good to have knowledge on application packaging and application virtualization
• Strong time management, organizational, planning and follow-up skills; ability to multi-task effectively

Experience

• 10+ years of experience with minimum with 12+ year experience in Info/Cyber Security, Service Operations or IT Support or Customer Services or ITSM.
• Must have good experience working in ServiceNow HAM and Configuration management.
• ITIL certified.
• Strong communication & collaboration skills.
• Governance, Risk and Compliance experience
• Ability to diagnose improvement areas across processes, tools and systems.
• Profound analytical skills.
• Experienced in working with third parties and cross-functional teams.
• Experience in working across multiple disciplines, cultures and time zones.
• Bachelor’s degree in computer science, information systems, business administration or related field

How we’ll support you

• Training and development to help you excel in your career
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs

About us and our teams

Please visit our company website for further information:

https://www.db.com/company/company.html

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.