Security Lead for Risk IT (m/f/d) (Frankfurt)

Deutsche Börse Group is one of the leading global market
infrastructure providers. Our group provides trading, clearing,
settlement, market data distribution and other services for a broad
range of asset classes (securities, derivatives, FX…).

Deutsche Börse Group IT is organised as a product
organisation. Risk IT is part of the Risk Product, which mainly
serves the Risk Management department of Eurex Clearing AG,
regulated under EMIR, MaRisk et.al. Therefore, the services
provided by Risk IT must meet to a number of regulatory standards
an provide operational stability whilst keeping up with
developments in new technology.

We foster a culture of high standards, freedom and
responsibility. We encourage ownership, trust, working on
meaningful work and have a strong belief in developing
talent.

Risk develops and maintains several mission critical
applications for which the highest security posture is expected.
The Security Lead is a single point of contact for our various
application teams to give IT security guidance and education, as
well as coordinate implementation of security driven
changes.

Your key tasks
responsibilities:

• Keeping up to date with current security best practices
  and requirements
• Be a key part contributor to forming the strategic target
  picture of Risk IT when it comes to topics falling under your area
  of responsibility
• Review existing practices and work with application and
  operation teams to maintain a high-security standard.
• Be the Risk Product’s representative in company-wide
  security-driven projects.
• Maintain regular contact/rapport with Group
  Security.
• Be Risk IT’s the first point of contact for audit
  requests (both internal and external).
• Self-manage your own project priorities, deadlines, and
  deliverables.
• As Risk IT has a strong presence in Prague, whilst Risk’s
  business side as well as other stakeholders are based in Eschborn,
  occasional business trips.

You should possess and demonstrate the following
skills and qualifications:

• A degree in Computer Science or equivalent
  experience
• Broad knowledge and practical experience in IT
  security
• Knowledge of the ISO27k standards family
• Analytical and problem-solving skills as well as the
  ability to work across multiple groups of people
• Working proficiency and communication skills in verbal
  and written English
• Collaborative working style, naturally striving for
  inclusion rather than exclusion, creating transparency, proactively
  addressing issues

Preferred skills/qualifications – the following
skills would be a plus:

• Knowledge of formal IT security standards and related
  domains
• Experience with IT audits
• Familiarity with modern application design, information
  architecture, automation
• Comfort using MS Office, GitHub, JIRA,
  SharePoint
• Additionally, you need to be a team player with a sense
  of humor, good communication and collaboration skills, motivated
  and flexible.
• We would be happy to meet you and discuss what we are
  working on, and what we can offer you in terms of opportunities,
  benefits, and career prospects.