# Technical Information Security Officer (TISO) **Company**: Deutsche Bank **Location**: Bucharest, 6A Dimitrie Pompeiu Blvd **Work arrangement**: hybrid **Experience**: senior **Job type**: full-time **Category**: Security **Industry**: Finance **Apply**: https://db.wd3.myworkdayjobs.com/en-US/DBWebsite/job/Bucharest-6A-Dimitrie-Pompeiu-Blvd/SAS-WF-Senior-Engineer_R0424652-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_4a048169-7ad ## Description DB Global Technology is Deutsche Bank’s technology centre in Central and Eastern Europe. Since its set-up in 2013, Bucharest Technology Centre (BEX) has constantly proven its capacity to deliver global technology products and services, playing a dynamic role in the Bank’s technology transformation. The Shared Applications and Services organization came to life in 2023 as a direct result of the initiative of organizing shared assets in the bank, like Workflow Platforms, Document Systems, Process Automations etc. Workflow Tribe is a core domain within Deutsche Bank’s **Shared Applications and Services (SAS)**, responsible for delivering scalable, secure, and consumable workflow solutions across the bank. **Responsibilities:** - Be the subdomain-centric Technical Information Security Officer (TISO) and the technology specialists for applications or infrastructure, with an in-depth knowledge of the technologies used in the area they represent, as well as having a clear understanding of the IT security and control issues that may be in place - Complete Compliance Evaluation against Security Policies & Standards - Define remediation steps in collaboration with IT Application Owners - Support group wide remediation efforts - Support formal risk assessments for applications - Ensure Asset Security Testing and Security Scanning is performed for own assets - Security Incident management: review reporting and security monitoring, protect data and re-establish the confidentiality of information - Ensure Privileged access management good practice - Recertify technical user access rights - Enforce policies, standards and guidelines **Skills:** - Experience with working on risk and control topics in a regulated industry - Experience working with Security Policies and Standards - Experience conducting formal compliance evaluations of technical and process requirements and risk reviews - Knowledge of security capabilities (TLS, OAuth2, certificate-based authentication, encryption, Identity and Access Management) - Good Knowledge of the Software Development Life Cycle processes and the related security controls - Proactive can-do attitude - A creative approach towards solving technical problems - Ability to collaborate and problem solve across teams - Ability to support incident response when required - Able to work efficiently with colleagues in multiple locations - Willing to collaborate across domains, for efficiency in technology sharing and reuse - Excellent communication skills in English **Well-being & Benefits** - Emotionally and mentally balanced: We support you in dealing with life crises, maintaining stability through illness, and maintaining good mental health - Physically thriving: We support you in managing your physical health by taking appropriate preventive measures and providing a workplace that helps you thrive - Socially connected: We strongly believe in collaboration, inclusion and feeling connected to open up new perspectives and strengthen our self-confidence and well-being - Financially secure: We support you in meeting personal financial goals during your active career and for the future ## Skills ### Required - risk and control - security policies - compliance evaluations - security capabilities - software development life cycle --- Source: [Apply at db.wd3.myworkdayjobs.com](https://db.wd3.myworkdayjobs.com/en-US/DBWebsite/job/Bucharest-6A-Dimitrie-Pompeiu-Blvd/SAS-WF-Senior-Engineer_R0424652-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)