Information Security Expert Second Line of Defence (f/m/d) (Frankfurt)

Field of activity

The central Information Security 2nd Line of Defence team
is embedded in the Chief Risk Officer area of Deutsche Börse Group.
The function provides effective independent oversight to and
monitoring of Information Technology and Information
Security.

Tasks/responsibilities

• Definition and maintenance of the Information Security
  risk framework
• Implementation of a DBG-wide ISR (Information Security
  Risk) Governance and Assurance Framework to ensure the
  effectiveness of the ISR framework incl. execution of assurance
  reviews
• Overseeing that regulatory requirements and best practise
  for ISR are implemented
• Monitoring and support the reporting of information
  security risks to Executive and Supervisory Boards and/or relevant
  committees incl. results of assurance reviews
• Provide challenge to IT and IT Security risk and control
  assessments
• Provide ISR oversight for issue remediation, new
  products, services and as part of the Change Management
  Process
• Support ISR counterparts in (regulated) Group entities in
  implementing and executing the ISR framework
• Further develop and implement security awareness measures
  within the organisation

Qualifications/required skills

• University or similar degree in a relevant
  field
• Minimum 5 years of experience and proven track record in
  a senior ISR role in a regulated financial institution
• In-depth knowledge of relevant regulation (BAIT, MaRisk,
  CSSF circulars, etc) and relevant standards (ISO 2700X, ITIL, SOGP,
  COBIT, etc.)
• Strong technical background and practical knowledge in
  relevant IT Security solutions
• Very good understanding of evolving technologies like
  Cloud, Artificial Intelligence, Blockchain and Robotics
• Excellent analytical skills, creativity, critical
  thinking, ability to identify problems and propose
  solutions
• Excellent presentation and interpersonal
  skills