Senior IT Risk Management Specialist - Ecosystem Partner Security Risk Management (f/m/d)

​​​​Your area of work:

The Group Security department directly contributes to execution of the Deutsche Börse Group information security strategy. As a central service provider for the Group entities, Group Security is responsible to protect information assets, incl. suppliers, in terms of safety, integrity, confidentiality, authenticity and availability by enforcing information security controls based on the relevant regulatory requirements and follows the international standard ISO/IEC 27000-series on the Information Security Management System.

Your responsibilities:
Providing IT security expertise to support the business in line with the following key responsibilities:

• Manage and lead cyber security risk exposure of all Ecosystem system partners.
• Consult Business Owners on the IT Security Risk Assessments, assuring proper risk identification and assessment in accordance with the Information Security Framework, and monitoring the risk remediation.
• Drive security initiatives to ensure compliance with regulations and the IS framework.
• Maintain trusted relationships with our business stakeholders, e.g. Risk Owner(s), Chief Information Security Officer, Compliance Officer(s), Technical Information You ensure Security Officer(s), and Internal/External Audit.
• Ensure daily operational duties relating to security management in compliance with relevant policies and industry best practices.
• Develop Information Security Guidelines, Processes and Procedures, Baselines in line with DBG Policies and Standards and international standards of quality management.
• Manage Supplier relevant information security incidents by leading and coordinating investigations with stakeholders and documenting incident reports.
• Support the regular reporting on information security to the respective boards and committees.
• Cooperate with internal functions like risk management, compliance, data protection, internal audit, with service providers, as well as contact for external auditors and customer requests regarding information security.
• Manage and lead the Onsite Risk Assessments for Ecosystem partners.

Your profile:

• University or comparable degree in Computer Science, Information Security, Engineering or related discipline.
• Entrepreneurship, Problem Solving Skills, Strong communication skill, self starter, out of the box thinking.
• IT experience with 5+ years in an information security role.
• Long-term experience in information security management, ideally in the financial industry or comparable regulated business environment.
• Distinctive knowledge in operating an ISMS to secure comprehensive business processes and complex IT-applications.
• Certifications like ITIL, CISM, CRISC, CISA, PMP or similar is an advantage.
• Deliverable-oriented, with strong problem-solving skills.
• Team player willing to cooperate with multiple colleagues across multiple office geo-locations.
• Strong analytical skills, reliability, and direct responsibility.
• Certification in IT Security fields (e.g. GIAC, CEH, CompTIA Security+, CISSP, CISA/CISM) considered a strong benefit.
• Ability to firmly present complex topics in an understandable manner.
• Strong English and German language skills. Please submit your application documents such as resume, cover letter, or any relevant certifications in English language.