Information Security Specialist - Assistant Vice President

Deutsche Bank • Jacksonville, FL

1d • $78,000 - $120,500 • Hybrid

About The Position

Job Description: Job Title Information Security Specialist Corporate Title Assistant Vice President Location Jacksonville, FL Overview We are looking for a knowledgeable Information Security Specialist to operate as a member of the Chief Security Office (CSO) Third Party Security team (TPS). As an Information Security Analyst, you will be responsible for supporting the development, execution, and maintenance of Deutsche Bank’s information security strategy and program under the management of the CSO. You will work in strategic alignment and partnership with Deutsche Bank’s Third-Party Risk Management (TPRM) program under Third Party Management (TPM). What We Offer You A diverse and inclusive environment that embraces change, innovation, and collaboration A hybrid working model, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days Employee Resource Groups support an inclusive workplace for everyone and promote community engagement Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits Educational resources, matching gift and volunteer programs What You’ll Do Perform Information Security third‑party risk assessments, including onsite reviews, and analyze third‑party policies, evidence, and security gaps Evaluate identified gaps through risk and business impact analysis, documenting findings clearly and comprehensively Recommend remediation actions and collaborate closely with third parties and project managers to resolve Information Security issues efficiently Coordinate and support Third‑Party Information Security Review processes, track services, escalate issues, and negotiate contractual security obligations with business, legal, and vendors Contribute to compliance and risk assessment programs, respond to global regulatory requests, and help strengthen the overall security control framework Communicate effectively with internal and external stakeholders and present Information Security risks clearly across various management levels Skills You’ll Need Strong experience in IT Security and Information Security across both technical and organizational controls Solid knowledge of Information Security controls and Risk Management principles General understanding of the banking/financial industry and how security risks impact financial institutions Hands-on experience with ISO27001 and industry frameworks such as NIST, ENISA, SOC2, PCI, ISO27017, and MITRE ATT&CK Understanding of Governance, Risk, and Control (GRC) tools, frameworks, and best practices Skills That Will Help You Excel Knowledge Experience with Cloud Security Alliance (CSA) tools such as CCM and CAIQ Knowledge of global financial regulations impacting InfoSec (EU Cybersecurity Act, MAS, HKMA TRM, EBA, DORA, GDPR, NYDFS, SOX, etc.) High proficiency in Microsoft Office Suite for documentation, reporting, and presentation Familiarity with Shared Assessment Programs (SIG, FSQS, etc.) Experience or familiarity with data reporting, including defining metrics and sourcing data Expectations It is the Bank’s expectation that employees hired into this role will work in the Jacksonville, FL office in accordance with the Bank’s hybrid working model. Deutsche Bank provides reasonable accommodations to candidates and employees with a substantiated need based on disability and/or religion. The salary range for this position in Jacksonville is $78,000 to $120,500. Actual salaries may be based on a number of factors including, but not limited to, a candidate’s skill set, experience, education, work location and other qualifications. Posted salary ranges do not include incentive compensation or any other type of remuneration. Deutsche Bank Benefits At Deutsche Bank, we recognize that our benefit programs have a profound impact on our colleagues. That’s why we are focused on providing benefits and perks that enable our colleagues to live authenti­cally and be their whole selves, at every stage of life. We provide access to physical, emotional, and financial wellness benefits that allow our colleagues to stay financially secure and strike balance between work and home. Click here to learn more! Learn more about your life at Deutsche Bank through the eyes of our current employees https://careers.db.com/life The California Consumer Privacy Act outlines how companies can use personal information. If you are interested in receiving a copy of Deutsche Bank’s California Privacy Notice please email [email protected] . #LI-HYBRID We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively. Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group. We welcome applications from all people and promote a positive, fair and inclusive work environment. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status or other characteristics protected by law. Click these links to view Deutsche Bank’s Equal Opportunity Policy Statement and the following notices: EEOC Know Your Rights ; Employee Rights and Responsibilities under the Family and Medical Leave Act ; and Employee Polygraph Protection Act .

Requirements

• Strong experience in IT Security and Information Security across both technical and organizational controls
• Solid knowledge of Information Security controls and Risk Management principles
• General understanding of the banking/financial industry and how security risks impact financial institutions
• Hands-on experience with ISO27001 and industry frameworks such as NIST, ENISA, SOC2, PCI, ISO27017, and MITRE ATT&CK
• Understanding of Governance, Risk, and Control (GRC) tools, frameworks, and best practices

Nice To Haves

• Knowledge Experience with Cloud Security Alliance (CSA) tools such as CCM and CAIQ
• Knowledge of global financial regulations impacting InfoSec (EU Cybersecurity Act, MAS, HKMA TRM, EBA, DORA, GDPR, NYDFS, SOX, etc.)
• High proficiency in Microsoft Office Suite for documentation, reporting, and presentation
• Familiarity with Shared Assessment Programs (SIG, FSQS, etc.)
• Experience or familiarity with data reporting, including defining metrics and sourcing data

Responsibilities

• Perform Information Security third‑party risk assessments, including onsite reviews, and analyze third‑party policies, evidence, and security gaps
• Evaluate identified gaps through risk and business impact analysis, documenting findings clearly and comprehensively
• Recommend remediation actions and collaborate closely with third parties and project managers to resolve Information Security issues efficiently
• Coordinate and support Third‑Party Information Security Review processes, track services, escalate issues, and negotiate contractual security obligations with business, legal, and vendors
• Contribute to compliance and risk assessment programs, respond to global regulatory requests, and help strengthen the overall security control framework
• Communicate effectively with internal and external stakeholders and present Information Security risks clearly across various management levels

Benefits

• A diverse and inclusive environment that embraces change, innovation, and collaboration
• A hybrid working model, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days
• Employee Resource Groups support an inclusive workplace for everyone and promote community engagement
• Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits
• Educational resources, matching gift and volunteer programs
• health and wellbeing benefits
• retirement savings plans
• parental leave
• family building benefits

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed