# Divisional Risk and Control Specialist, VP

**Company**: Deutsche Bank
**Location**: Pune
**Experience**: senior
**Job type**: full-time
**Category**: IT
**Industry**: Finance

**Apply**: https://db.wd3.myworkdayjobs.com/en-US/DBWebsite/job/Pune---Business-Bay/Divisional-Risk-and-Control-Specialist--VP_R0455257?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_b5c11be6-578

## Description

We are seeking an experienced technology risk professional to play a key role in our Proactive Risk Testing Programme, delivering rigorous, risk-based assessments across our Corporate Bank Technology landscape.

The role requires the ability to develop a deep understanding of applications and their end-to-end architecture, critically evaluate the design and effectiveness of implemented technology controls, and identify both existing and emerging IT and Information Security risks.

**Your key responsibilities**

- Lead and deliver risk-based, end-to-end IT and Information Security assessments across the Corporate Bank (CB) Technology landscape, independently assessing the design, implementation and operating effectiveness of key controls.

- Develop an in-depth understanding of business services and their supporting technology, including application and platform architecture, infrastructure, databases, operating systems, cloud services, networks, interfaces, APIs, data flows, batch and real-time processing, and third-party dependencies.

- Perform technical deep dives across applications, platforms, databases and infrastructure to identify and assess existing and emerging IT and IS risks, control weaknesses, root causes, systemic themes and potential impacts on confidentiality, integrity, resilience and regulatory compliance.

- Assess technology lifecycle risks and controls including design, development and production considering aspects such as access management, security, operations and resilience.

- Apply professional judgement to define risk-based testing scope, develop risk and control matrices, determine sampling and testing approaches, analyze technical evidence, and produce clear, well-supported conclusions in line with testing standards.

- Challenge technology and control owners constructively, communicate complex technical risks in business terms and support agreement on pragmatic and sustainable remediation actions.

- Identify cross-application and thematic risks, emerging technology threats, control automation opportunities and opportunities to use data analytics and continuous monitoring to improve assurance coverage.

- Partner with Technology Application Teams, Architects, Engineering, Information Security, Control Owners, the Divisional Control Office, Group Audit and other stakeholders to promote transparency and sustainable risk mitigation.

- Contribute to the ongoing enhancement of risk-based testing methodologies, standards, documentation and quality assurance, while providing guidance and technical coaching to colleagues where required.

**What we’ll offer you**

- Best in class leave policy

- Gender neutral parental leaves

- 100% reimbursement under childcare assistance benefit (gender neutral)

- Sponsorship for Industry relevant certifications and education

- Employee Assistance Program for you and your family members

- Comprehensive Hospitalization Insurance for you and your dependents

- Accident and Term life Insurance

- Complementary Health screening for 35 yrs. and above

## Skills

### Required
- IT/Cyber security assessments
- technology risk
- information security
- controls assurance
- COBIT
- NIST
- ISO 27001
- ITIL
- CISA
- CISSP
- CRISC

### Nice to have
- Google Cloud Platform (GCP)
- DevOps
- Agile
- AI tools

---

Source: [Apply at db.wd3.myworkdayjobs.com](https://db.wd3.myworkdayjobs.com/en-US/DBWebsite/job/Pune---Business-Bay/Divisional-Risk-and-Control-Specialist--VP_R0455257?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)