Verified Job
Accounting - Finance
Divisional Risk and Control Specialist
Accounting - Finance
#219974
Remote / WFH
Job Description
Technology, Data & Innovation (TDI) Divisional Control & Regulatory Office (DCRO) provides services to multiple functions in the group, to deliver Deutsche Bank’s risk and control agenda. The function provides a consolidated view and central coordination of (non-financial) risks, as well as effective, efficient, and consistent standards and policies across Technology.
DCRO is a dedicated risk, control, and regulatory oversight function, with prime responsibility for managing and proactively mitigating risk across the full breadth of the Technology, Data & Innovation (TDI) organization. DCRO department is divided across three services: Risk & Control Assessment, Risk Management & Reporting, and Information Technology (IT) Policy and Control.
The Divisional Risk and Control Analyst will support DCRO Risk & Control Assessment in identifying the Technology Risk Portfolio and work across TDI to provide the project and programme information required to ensure the objectives are realized and to highlight where there are delivery challenges or constraints.
This role is integral in supporting the front-line management in identifying, assessing/measuring risks, identifying remediation actions and monitoring risks, by performing comprehensive risk assessments of technology functions according to established process and control standards.
The role could involve participating in a variety of types of risk assessments including Deep Dives on technical subjects, Read Across for identification of themes in other bank divisions, review of emerging technologies, mandatory compliance assessments such as SOx, SWIFT CSP, Group ORM Risk assessments such as the RCA process or project risk assessments for the banks major initiatives as determined through the Investment Governance & Technology Strategy.
The Divisional Risk & Control Analyst will work within the Risk Assessments team and closely interact with the different Risk Officers, Regional leads, 2LoD such as Non-Financial Risk Management (NFRM) and the group’s frontline technology groups. This will include CIOs, development & infrastructure leads, programme managers, architects, and production support areas.
What we’ll offer you
As part of our flexible scheme, here are just some of the benefits that you’ll enjoy
• Best in class leave policy
• Gender neutral parental leaves
• 100% reimbursement under childcare assistance benefit (gender neutral)
• Flexible working arrangements
• Sponsorship for Industry relevant certifications and education
• Employee Assistance Program for you and your family members
• Comprehensive Hospitalization Insurance for you and your dependents
• Accident and Term life Insurance
• Complementary Health screening for 35 yrs. and above
Your key responsibilities
• Performs technology risk assessments across Technology areas and processes, evaluating relevant inherent risks, validating controls, assessing the effectiveness of control design and operation, and determining residual risk.
• Performs risk assessments across many disciplines from an infrastructure, application, and security perspective. This includes technology delivery, operations, security, and availability controls of IT infrastructure including servers (UNIX, Windows, and Wintel); Databases and Storage Arrays, Middleware, Data Centers, Network devices, Firewalls, Antivirus, Intrusion Detection Services (IDS) and Intrusion Prevention Services (IPS). Assessments also include review of controls and risks
DCRO is a dedicated risk, control, and regulatory oversight function, with prime responsibility for managing and proactively mitigating risk across the full breadth of the Technology, Data & Innovation (TDI) organization. DCRO department is divided across three services: Risk & Control Assessment, Risk Management & Reporting, and Information Technology (IT) Policy and Control.
The Divisional Risk and Control Analyst will support DCRO Risk & Control Assessment in identifying the Technology Risk Portfolio and work across TDI to provide the project and programme information required to ensure the objectives are realized and to highlight where there are delivery challenges or constraints.
This role is integral in supporting the front-line management in identifying, assessing/measuring risks, identifying remediation actions and monitoring risks, by performing comprehensive risk assessments of technology functions according to established process and control standards.
The role could involve participating in a variety of types of risk assessments including Deep Dives on technical subjects, Read Across for identification of themes in other bank divisions, review of emerging technologies, mandatory compliance assessments such as SOx, SWIFT CSP, Group ORM Risk assessments such as the RCA process or project risk assessments for the banks major initiatives as determined through the Investment Governance & Technology Strategy.
The Divisional Risk & Control Analyst will work within the Risk Assessments team and closely interact with the different Risk Officers, Regional leads, 2LoD such as Non-Financial Risk Management (NFRM) and the group’s frontline technology groups. This will include CIOs, development & infrastructure leads, programme managers, architects, and production support areas.
What we’ll offer you
As part of our flexible scheme, here are just some of the benefits that you’ll enjoy
• Best in class leave policy
• Gender neutral parental leaves
• 100% reimbursement under childcare assistance benefit (gender neutral)
• Flexible working arrangements
• Sponsorship for Industry relevant certifications and education
• Employee Assistance Program for you and your family members
• Comprehensive Hospitalization Insurance for you and your dependents
• Accident and Term life Insurance
• Complementary Health screening for 35 yrs. and above
Your key responsibilities
• Performs technology risk assessments across Technology areas and processes, evaluating relevant inherent risks, validating controls, assessing the effectiveness of control design and operation, and determining residual risk.
• Performs risk assessments across many disciplines from an infrastructure, application, and security perspective. This includes technology delivery, operations, security, and availability controls of IT infrastructure including servers (UNIX, Windows, and Wintel); Databases and Storage Arrays, Middleware, Data Centers, Network devices, Firewalls, Antivirus, Intrusion Detection Services (IDS) and Intrusion Prevention Services (IPS). Assessments also include review of controls and risks
