Job Description:
DB Global Technology is Deutsche Bank’s technology centre in Central and Eastern Europe. Since its set-up in 2013, Bucharest Technology Centre (BEX) has constantly proven its capacity to deliver global technology products and services, playing a dynamic role in the Bank’s technology transformation.
We have a robust, hands-on engineering culture dedicated to continuous learning, knowledge-sharing, technical skill development and networking. We are an essential part of the Bank’s technology platform and develop applications for many important business areas.
The Chief Security Office's (CSO) mission is to protect Deutsche Bank's business, clients, assets, and employees. Part of CSO, the Risk Lead Function and Application Control Adherence Team is supporting the end-to-end lifecycle of internal and external audits, findings management and regulatory requests.
We are seeking an experienced Information Security Audit & Risk Management Specialist to support global security functions in managing information security risk, audit findings, and regulatory obligations. The role focuses on driving transparency of risk exposure, supporting remediation activities, and ensuring effective governance across complex, multi-stakeholder environments.
Responsibilities
- Support the information security audit lifecycle by actively participating in audit meetings, coordinating subject matter experts, and ensuring timely collection of documentation.
- Drive effective findings management by supporting finding owners throughout the lifecycle, providing constructive feedback on documentation quality and risk implications.
- Support timely remediation of audit findings by collaborating closely with business stakeholders and auditors, tracking milestones, and proactively escalating risks or delays.
- Provide regular and ad-hoc status updates on audit findings to senior management and other stakeholders, ensuring transparency and early issue escalation.
- Maintain and continuously update internal trackers, training materials, and supporting documentation related to audit and findings management.
Well-being & Benefits
Emotionally and mentally balanced: We support you in dealing with life crises, maintaining stability through illness, and maintaining good mental health. * Empowering managers who value your ideas and decisions. Show your positive attitude, determination, and open-mindedness. * A professional, passionate, and fun workplace. * A modern office with fun and relaxing areas to boost creativity. * Continuous learning culture with coaching and support from team experts. * A culture where you can openly speak about mental health.
Physically thriving: We support you in managing your physical health by taking appropriate preventive measures and providing a workplace that helps you thrive. For example, Private healthcare and life insurance with premium benefits for you and discounts for your loved ones, healthier ways of working and check-ups.
Socially connected: We strongly believe in collaboration, inclusion and feeling connected to open up new perspectives and strengthen our self-confidence and well-being. * 24 days holiday, loyalty days, and bank holidays (including weekdays for weekend bank holidays). * Hybrid working model with 40% remote work. * Options for flexible working hours. * Enjoy retailer discounts, cultural and CSR activities, workshops, and more.
Financially secure: We support you in meeting personal financial goals during your active career and for the future. * Competitive income, performance-based promotions, and a sense of purpose. * Meal vouchers, bonuses for referrals
Interested in more: discover what our employees value in the Well-being & Benefits hub!
Skills
- Proven experience in information security risk management, audit coordination, or regulatory compliance within the financial services or technology sector.
- Strong understanding of audit findings management, issue remediation, and control frameworks in regulated environments.
- Excellent stakeholder management and communication skills, able to translate security and risk management concepts for both technical and non-technical audiences.
- Hands-on personality with problem solving attitude, strong analytical skills, experienced in managing multiple priorities and tight deadlines.
- Keen interest in information security and risk management.
