Information Security Officer (ISO)

at  Deutsche Bank

ABOUT DWS:

Today, markets face a whole new set of pressures – but also a whole lot of opportunity too. Opportunity to innovate differently. Opportunity to invest responsibly. And opportunity to make change.
Join us at DWS, and you can be part of an industry-leading firm with a global presence. You can lead ambitious opportunities and shape the future of investing. You can support our clients, local communities, and the environment.
We’re looking for creative thinkers and innovators to join us as the world continues to transform. As whole markets change, one thing remains clear; our people always work together to capture the opportunities of tomorrow. That’s why we are ‘Investors for a new now’.
As investors on behalf of our clients, it is our role to find investment solutions. Ensuring the best possible foundation for our clients’ financial future. And in return, we’ll give you the support and platform to develop new skills, make an impact and work alongside some of the industry’s greatest thought leaders. This is your chance to achieve your goals and lead an extraordinary career.
This is your chance to invest in your future.

As an Information Security Officer you will (be):

• To assume ownership and responsibility for assigned IT assets, in line with the Group Information Security management processes and the DWS ISMS
• To execute IS Risk assessments and compliance evaluations for assigned IT assets
• To assign accurate information classification to assigned IT assets based on
• confidentiality of Information
• To maintain the Information Security related documentation of assigned IT assets in the Group’s asset inventory
• To establish a good working relationship with Business Application Owners (BAO) and other Subject Matter Experts (SME) of the divisions and functions of the assigned assets and develop profound knowledge of the supported processes and data
• To support key role holders such as ITAOs and TISOs to develop a secure environment by evaluating the Information Security requirements as early as possible in the system development life cycle to select the applicable Information Security Controls for implementation
• To give guidance to ITAOs and TISOs on the implementation of compensating Controls in case of deviations from the applicable Information Security Controls
• To execute and document periodical recertification of user access rights in their area of responsibility in compliance with the Group’s identity and access processes
• To support implementation of Segregation of Duty (SoD) rules for the assigned IT assets
• To contribute to the Information Security incident management process in the case of a security breach
• To deliver all items requested during regulatory and internal Information Security related audits
• To remain fully trained and skilled by completing the required Information Security
• trainings provided by CSO or as requested by the Divisional CISO or the Divisional ISO.