Information Security Expert Cloud Security Engineering - Assistant Vice President

$100,000 - $142,250/Yr

DB USA Core Corporation - Cary, NC

Full-time - Mid Level

Remote - Cary, NC

Funds, Trusts, and Other Financial Vehicles

About the position

The Information Security Expert - Cloud Security Engineering role at Deutsche Bank is designed for an individual who will analyze and specify security measures for cloud services, particularly within Google Cloud Platform and Azure. This position is crucial in ensuring the security of cloud environments as the bank adopts public cloud services. The expert will work on developing security controls, collaborating with application developers, and contributing to the overall cloud security strategy while maintaining a focus on innovation and data protection.

Responsibilities

• Analyze the security features and needs of cloud services requested by the Bank's application developer community.
• Specify security rules for guardrails to be enforced during the CI/CD pipeline and at runtime.
• Identify additional security measures needed for safe cloud service usage and collaborate on their implementation.
• Document analysis, residual risks, and implementation plans for controls, presenting them to stakeholders.
• Collaborate with engineers to ensure specifications are implemented in policy-enforcing tools and contribute to tooling strategy.
• Act as an internal expert in cloud service security features, advising teams on security improvements.
• Revisit past service analyses and guardrail specifications to account for vendor changes and developer usage.

Requirements

• Experience in information security and public cloud technologies.
• Understanding of Google Cloud Platform or Microsoft Azure, with hands-on investigation skills.
• Exposure to agile development techniques, CI/CD pipelines, and Terraform.
• Awareness of cloud security products such as Cloud Security Posture Management tools.
• Ability to communicate ideas clearly and concisely, tailored to the audience's knowledge.
• Understanding of complex, matrix-managed organizations and working with audit, control, and risk functions.

Nice-to-haves

• Excellent communication skills, both written and spoken.
• Passion for Information Security and Cloud Security Engineering.
• Self-motivated and a self-starter.

Benefits

• Diverse and inclusive environment that embraces change and innovation.
• Hybrid working model with up to 60% work from home.
• Generous vacation, personal and volunteer days.
• Access to employee resource groups and communities of practice.
• Competitive compensation packages including health and wellbeing benefits, retirement savings plans, and parental leave.