Position Overview

Job Title: Technical Information Security Officer (TISO)

Corporate Title: Assistant Vice President

Location: Pune, India

Role Description

A Technical Information Security Officer (TISO) works under the guidance of the Divisional TISO and is responsible for the security of assigned IT assets. These assets may include application software, related databases, infrastructure components, IT services, hardware, and facility?related IT systems.
The TISO assumes full security ownership for these assets and performs tasks in line with defined and approved rules, standards, and processes. Core responsibilities include conducting risk and compliance assessments, defining and reviewing security requirements, approving access control configurations, and ensuring the implementation of appropriate security controls.
The role also involves collaborating with key stakeholders to design secure environments, perform risk assessments, and maintain proper documentation for all risk management activities. Additionally, the TISO contributes to the development of IT risk policies and standards, ensuring compliance and mitigating potential security risks across the assigned landscape.

What We'll Offer You

As part of our flexible scheme, here are just some of the benefits that you'll enjoy

Best in class leave policy
Gender neutral parental leaves
100% reimbursement under childcare assistance benefit (gender neutral)
Sponsorship for Industry relevant certifications and education
Employee Assistance Program for you and your family members
Comprehensive Hospitalization Insurance for you and your dependents
Accident and Term life Insurance
Complementary Health screening for 35 yrs. and above

Your Key Responsibilities

As a Technical Information Security Officer (TISO), you will be entrusted with a critical role in ensuring the security of our IT assets. Your key responsibilities include:

Ownership and Risk Management: Assume ownership of assigned IT assets, including application software, databases, infrastructure, and outsourced IT services. Conduct comprehensive risk and compliance assessments to ensure security measures are in place.
Guidance and Implementation: Provide expert guidance to IT Asset Owners (ITAOs) and Information Security Officers (ISOs) on security requirements and the implementation of compensating controls. Ensure security is integrated early in the system development life cycle.
Access Control and Authorization: Approve access control setups and user authorization for assigned IT assets. Perform periodic recertification of access rights in compliance with organizational policies.
Security Controls: Ensure the implementation of necessary information security controls. Influence and provide feedback on IT risk and control-related policies and standards. Design and oversee the implementation of security measures.
Collaboration and Coordination: Work closely with ITAOs and other ISO role to establish monitoring capabilities for IT assets. Review monitoring outputs to maintain the required security level and advise on remediation of gaps.
Incident Management: Contribute to the Information Security Incident Management Process in case of security breaches for assigned IT assets.
Documentation and Compliance: Maintain thorough documentation of information security risk management activities, including major decisions, identified risks, and mitigation measures. Ensure compliance with internal policies and standards.
Escalation and Conflict Resolution: Serve as the first point of escalation and conflict resolution, both internally and with external parties such as regulators.
Regulatory Awareness: Pre-empt changes in the legal and regulatory environment and advise senior management on potential impacts. Oversee the performance and quality assurance of assessment executions for audits and regulatory compliance.
Senior Management Support: Ensure appropriate senior management awareness and oversight to follow up on action items and resolve identified issues.
Cloud Security: Implement and manage security measures for cloud-based services and infrastructure to protect organizational data and assets.
OSS Vulnerability Management: Identify, assess, and mitigate vulnerabilities in open-source software (OSS) to ensure the security and integrity of IT assets.
Ethical AI: Ensure the secure and responsible use of AI technologies within the organization, adhering to ethical AI practices.
By fulfilling these responsibilities, you will help maintain the security and integrity of our organization's IT assets, ensuring compliance and mitigate potential security risks.

Your Skills And Experience

To excel as a Technical Information Security Officer (TISO), you should possess the following skills and experience:

Technical Expertise: Strong technical knowledge of information security principles, practices, and technologies.
AI and Ethical AI: Proficiency in AI technologies and ethical AI practices, ensuring the secure and responsible use of AI within the organization.
Cloud Security: Expertise in cloud security, including the implementation and management of security measures for cloud-based services and infrastructure.
OSS Vulnerability Management: Experience in identifying, assessing, and mitigating vulnerabilities in open-source software (OSS) to ensure the security and integrity of the organization's IT assets.
Analytical Skills: Ability to conduct thorough risk assessments and develop effective solutions for complex security issues.
Communication Skills: Excellent communication skills to effectively convey security information to both technical and non-technical stakeholders.
Continuous Learning: Commitment to staying updated with the latest information security trends, technologies, and best practices.
Educational Background: A bachelor's degree in Information Security, Computer Science, Information Technology, or a related field is typically required. An advanced degree can be advantageous.
Professional Experience: Several years of professional experience in information security or a related field, with experience in roles such as Information Security Analyst, Security Engineer, or similar positions.
Certifications: Relevant certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CEH (Certified Ethical Hacker).
Teamwork and Initiative: Excellent communication skills, strong independence and initiative, ability to work in agile delivery teams, and good experience in working with distributed teams, especially in Germany and India.
Cyber Security and Cryptography: Strong experience and knowledge in cybersecurity, cryptography, and encryption/decryption solutions.
Configuration Skills: Proficiency in configuring TLS/SSL, PKI, ACLs, and API security.
Platform and Database Knowledge: Experience with Windows, Unix, Linux platforms, and Oracle & SQL databases.
By bringing these skills and experiences to the role, you will contribute significantly to maintaining the security and integrity of our organization's IT assets, ensuring compliance, and mitigating potential security risks.

How We'll Support You

Training and development to help you excel in your career
Coaching and support from experts in your team
A culture of continuous learning to aid progression
A range of flexible benefits that you can tailor to suit your needs

About Us And Our Teams

Please visit our company website for further information:

https://www.db.com/company/company.html

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

Technical Information Security Officer (TISO), AVP

Security Officer

Assistant Security Officer

Assistant Security Officer

Security Officer