Information Security Risk Specialist

Deutsche Bank; Birmingham; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading global financial institution is seeking an Information Security Risk Specialist in Birmingham. The role involves monitoring IS risks, conducting risk assessments, and assessing the effectiveness of controls. Candidates should have a strong understanding of IS and IT Risk frameworks and possess relevant certifications. This position offers a hybrid work model and competitive benefits, providing an excellent opportunity for professional growth and development.

Benefits

Hybrid Working

Competitive salary

30 days' holiday

Life Assurance

Private Healthcare

Flexible benefits

Qualifications

• Good understanding of Information Security and Technology in financial services.
• Comfortable working in a large complex institution.
• Understands Operational Risk Management.
• Knowledge of key IS/IT Regulatory laws such as DORA and EBA guidelines.

Responsibilities

• Monitor a specific business division’s IS Risk Profile.
• Perform targeted analysis on key IS Risks.
• Monitor impact of bank-wide IS Strategies.
• Assess effectiveness of key controls.
• Explore emerging IS risks for regulatory support.

Skills

Understanding of Information Security

Operational Risk Management

Knowledge of IS/IT Risk Frameworks

Experience with MS 365 apps

Reporting systems experience (Tableau or Power BI)

Education

Relevant professional certifications (e.g., CISSP, CISA)

Job description

Information Security Risk Specialist

Location: Birmingham

Corporate Title: Assistant Vice President

The role is within the 2nd Line of Defence (LoD) Information Security (IS) Risk Team based in Birmingham and part of a global team in Singapore, Mumbai, Frankfurt, Jacksonville and New York. The team is part of the wider Information Security & Technology Risk Team of 37. The team monitors IS Risks across the Group within all Divisions & Regions and provides Senior Management and Regulators with an assessment of the Information Security Risks. In this role you will provide support on various topics including risk assessments, targeted reviews, incident root‑cause thematic, new business product assessments, transformation risk assessments, regulatory exams/enquiries and emerging risks.

What We’ll Offer You

• Hybrid Working – enabling eligible employees to work remotely for part of their working time and reach a pattern that works for them
• Competitive salary and non‑contributory pension
• 30 days’ holiday plus bank holidays, with the option to purchase additional days
• Life Assurance and Private Healthcare for you and your family
• A range of flexible benefits including Retail Discounts, a Bike4Work scheme and Gym benefits
• The opportunity to support a wide ranging CSR programme + 2 days’ volunteering leave per year

Your Key Responsibilities

• Monitoring a specific business division’s IS Risk Profile including risk appetite breaches, remediation and risk and control assessment review.
• Performing and presenting results of targeted analysis on key IS Risks and inputting them into the maturing of the IS Risk Framework, Policies and Control Objectives.
• Monitoring the impact to the IS Risk Profile of major bank‑wide IS Strategies such as ISR Glidepath, Security Strategy, Digitalisation, Robotics and Google Cloud.
• Assessing the operating/design effectiveness of key controls such as Identity and Access, Cryptography, Data Leakage, etc.
• Exploring the impact of emerging IS risks and providing support to UKI/European Central Bank based regulatory enquiries.

Your Skills and Experience

• A good understanding of Information Security and Technology and how it is used within financial services.
• Comfortable working in a large complex institution and directly dealing with key internal stakeholders and an understanding of Operational Risk Management.
• An understanding of IS and IT Risk Frameworks such as ISO 27001, NIST 800‑53, ITIL, COBIT and key IS/IT Regulatory laws such as DORA and EBA guidelines.
• Experience working with end‑user IT systems such as MS 365 apps, and further experience of reporting/business intelligence systems such as Tableau or Power BI is an advantage.
• Relevant professional certifications such as CISSP, CISA, CISM, CRISC, ITIL, ISO27001 Lead Auditor or similar are a plus.

How We’ll Support You

• Training and development to help you excel in your career.
• Coaching and support from experts in your team.
• A culture of continuous learning to aid progression.
• A range of flexible benefits that you can tailor to suit your needs.
• We value diversity and, as an equal‑opportunity employer, we make reasonable adjustments for those with a disability such as the provision of assistive equipment if required (e.g. screen readers, assistive hearing devices, adapted keyboards).

Please note the expected salary for some roles may be below the minimum level requirements to support candidates who require a Skilled Worker visa to work in the UK. Should you already have a Skilled Worker visa and be identified for a role, we can discuss and support you with the process.

About Us

Deutsche Bank is the leading German bank with strong European roots and a global network. We are proud to have been named The Times Top 50 Employers for Gender Equality 2025 for six consecutive years, awarded a Gold Award from Stonewall and named in their Top 100 Employers 2024 for our work supporting LGBTQ+ inclusion.

If you have a disability, health condition, or require any adjustments during the application process, we encourage you to contact our Adjustments Concierge at [e-mail] to discuss how we can best support you. Alternatively, you can share your phone number, and a member of the team will be happy to call you to talk through your specific requirements.

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively. Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

Seniority level

• Not Applicable

Employment type

• Full‑time

Job function

• Information Technology