PB Information Security Officer - Mumbai, India - 9608 Deutsche India Private Limited, Mumbai Branch

    9608 Deutsche India Private Limited, Mumbai Branch
    9608 Deutsche India Private Limited, Mumbai Branch Mumbai, India

    1 week ago

    Default job background
    Description
    Divisional Risk and Control is responsible for non-financial risk and control management for the relevant operating Division or Infrastructure function or Dedicated Central Control Unit for the bank


    Work includes:

    • Defining the risk management framework
    • Developing process and procedures to report on, manage, and mitigate risks to acceptable levels
    • Maintaining operational control and discipline across the organizational unit
    • Ensuring that business is conducted in accordance with applicable laws, regulations and in adherence to the bank's internal policies
    • Providing thought-leadership around business specific risk taxonomies, assessment methodologies, process and control implementation
    • Developing, tailoring and testing the control infrastructure for the business
    • Communicating regulatory development and implications to the business
    • Executing certain risk-related processes and draft first like risk procedures (e.g. product reviews, issue capture, regulatory change management, vendor management etc.)
    • Managing Risk and Compliance data and information for both first and second lines
    • Coordinating execution of risk and control self-assessment (RCSA) process
    • Driving messaging and information from second line to first line (e.g., policies, procedures, training)
    • Providing a consolidated view of non-financial risks
    • Developing a positive risk culture, whilst assuring strategy alignment among various organizational levelsWhat we'll offer youAs part of our flexible scheme, here are just some of the benefits that you'll enjoyBest in class leave policyGender neutral parental leaves100% reimbursement under childcare assistance benefit (gender neutral)


    Sponsorship for Industry relevant certifications and educationEmployee Assistance Program for you and your family membersComprehensive Hospitalization Insurance for you and your dependentsAccident and Term life InsuranceComplementary Health screening for 35 yrs.

    and aboveYour key responsibilitiesResponsible to ensure compliance with the Information Security Policy and the subordinate documents within area of responsibilityEstablish and document roles/entitlements for each of the application together with the Role owners.

    Ensure any changes to the roles are supported by documented valid justification/s along with an Impact and Risk assessment as part of business decisionsExecute IS Risk assessment and compliance evaluations for assigned IT assets with support from BSO communityReview and address quality issues within ISO scope of responsibilitiesEnsure execution of Information Security risk management in line with DB Information Security Policy/Guidelines including 1) InfoSec controls 2) Mitigating Control weakness 3) End user access review and recertification 4) provide InfoSec advisory on vendor relationships 5) Support BCM and DR exercise from ISO perspective 6) Providing guidance on control implementationSupport Chief ISO delegate on relevant actions and initiatives.
    Create Segregation of Duties (SoD) rules for IT , assess SoD Rule violations and make exception decisionsParticipate in Information Security initiatives and programmes, as relevant;Review and assess severity of information security breaches and recommend appropriate follow-up actions, where necessaryAdvise local business and other partners on CSO solutions and facilitate service adoption in cooperation with Central CSO teamsSupport in the review and assessment of data leakage incidents relevant to PB Booking CentreYour skills and experienceEducation & Experience:

    Proven experience of working within Information Security / Information Technology environment ideally in Banking EnvironmentExperience working on small to medium scale projects at least within a global environmentProfessional certification including ISO27001 – Lead Auditor/ Lead Implementer, CISM, CRISCUniversity degreeCompetencies:Outstanding problem solving, analytical and project management skillsProficiency with Microsoft Office programs; e.g.

    Excel , Word and PowerPointAbility to work in pressurised situationsStrong work ethic, commitment to excel and proven capacity to work effectively with minimum supervisionStrong communication (written and verbal) and relationship skills with excellent command of the English languageVery good influencing and management skills to liaise effectively with Business and control functionsPersonal Characteristics:
    Proactive attitude and self-initiativeAbility to think laterally.
    Strong Team Player skills as well as working independentlyEagerness to learn and adapt to new situations and processesDelivery-focused, able to manage multiple deliverables to deadlinesFlexibility with respect to new tasks and the ability to work diligently in stressful situationsAbility to learn quicklyDriven and able to handle day-to-day routine as well as cope with shifting priorities and changing responsibilities to meet needs and demandsHow we'll support youTraining and development to help you excel in your careerCoaching and support from experts in your teamA culture of continuous learning to aid progressionA range of flexible benefits that you can tailor to suit your needs