ITAO, AVP

Job Description

Job Title: ITAO, AVP

Location: Pune, India

Corporate Title: Assistant Vice President

Position Description

We are seeking an ITAO to join DWS's Private Markets Technology team to onboard and own business aligned strategic SaaS (Software as a Service) and internal applications. You will work closely with the wider technology team and business stakeholders to secure applications are onboarded and operated in a compliant manner to deliver on the business outcomes.

• The successful applicant is expected to have at least 12-15 years’ exposure to IT, preferably with Asset Management Business Applications and Processes.
• The IT Application Owner (ITAO) has sound IT risk management abilities. They follow one of several possible service delivery approaches, acknowledge interference with the IT application’s life cycle and assist with incorporating the adopted approach into best practice.
• Make sure that all steps in Identity & Access Management cycle (on-boarding, recertification, off-boarding) are compliant with DB Policies and application is on-boarded to central tools.
• The ITAO is aware of the gap in the current infrastructure solutions and where industry innovations are along the maturity lifecycle. They partner with application stakeholders to strengthen the infrastructure, ensuring compliance with the technical roadmap.
• The ITAO has a sound understanding of development methodologies and the IT policies necessary to execute productively in the organisation, aligned to the bank’s appetite for risk.
• The ITAO acts to enhance safety and security of the application, compliance with regulations, policies and standards, enhance operational readiness, and ease maintenance of the environment for producing change into production.
• The ITAO supports the bank’s audit function in the remediation of audit points and self-identified issues in order to reduce risk.
• The ITAO is tasked with producing and sustaining accurate documentation on compliance with methodologies, IT policies and IT security expectations.
• ITAOs will also be tasked with Application Decommissioning
• ITAOs will be driving activity that helps incidents reduction against an application
• Support compliance on all steps of SDLC process and make sure that all SDLC controls are green.
• Consult with the ITAO community, information security specialists in our CSO organization, and other infrastructure teams like the ORR/SDLC teams.

What we’ll offer you

As part of our flexible scheme, here are just some of the benefits that you’ll enjoy

• Best in class leave policy
• Gender neutral parental leaves
• 100% reimbursement under childcare assistance benefit (gender neutral)
• Sponsorship for Industry relevant certifications and education
• Employee Assistance Program for you and your family members
• Comprehensive Hospitalization Insurance for you and your dependents
• Accident and Term life Insurance
• Complementary Health screening for 35 yrs. and above

Your main responsibilities

• Enterprise IT Governance: In charge of review of current and proposed information systems for compliance with the organisation's obligations (among them legislation, regulatory, contractual and agreed standards/policies) and adherence to overall strategy
• Information security:  Communicates information security risks and issues to business managers and others. Performs basic risk assessments for small information systems. Contributes to vulnerability assessments. Applies and maintains specific security controls as required by organisational policy and local risk assessments. Investigates suspected attacks. Responds to security breaches in line with security policy and records the incidents and action taken.
• Information content publishing: Understands technical publication concepts, tools and methods and the way in which these are used. Uses agreed procedures to publish content. Obtains and analyses usage data and presents it efficiently. Understands, and applies principles of usability and accessibility to published information.
• Business risk management: Investigates and reports on hazards and potential risk events within a specific function or business area.
• Continuity management: Implements and contributes to the development of a continuity management plan. Coordinates the assessment of risks to the availability, integrity and confidentiality of systems that support critical business processes. Coordinates the planning, designing, and testing of maintenance procedures and contingency plans.
• Data management: Assists in delivering accessibility, retrievability, security and protection of data in an ethical manner.
• Methods and tools: Give support on the use of existing method and tools. Configures methods and tools within a known context. Creates and updates the documentation of methods and tools

Overall Responsibilities Summary:

• Work closely with business application users and SaaS vendors on application onboarding and governance.
• Guarantee appropriate controls onboarded and implemented where appropriate.
• Make sure that all steps in Identity & Access Management cycle (on-boarding, recertification, off-boarding) are compliant against DB Policies and application is on-boarded to central tools.
• Handle Internal and external application audits and Audit issue remediation activities.
• Completion of regular/recurring assessments
• Timely response to audit & regulatory criteria with evidence, were compliant.
• Make sure that infrastructure is compliant and has up-to-date patches.
• Plan for Application Hardware / Software / License upgrades or migration activities to align to the compliant platforms.
• Keep up-to-date DR Test Plan and oversee regular DR Tests
• Handle application capacity forecasting and monitoring.
• Run any IT Security incidents that may occur in the application.
• Support compliance on all steps of SDLC process and make sure that all SDLC controls are green.
• Application Decommissioning
• Drive incidents reduction against an application

Your capabilities and experience

Must have

• Hands on understanding of risk frameworks, control environments and application governance.
• Exposure to Software Development Lifecycle (SDLC) - from idea to production to understand our customer journey, these mostly application owners, business ISOs and development teams
• Experience on File transfer ,Filenet , SFTP, dbExchange, Datagateway, APIs.
• Basic Technical capabilities and infrastructure grasp (e.g.: MS SQL Server or Oracle database, PL/SQL, Linux, Network (firewalls, VPN) etc)
• Enterprise technology understanding and experience (e.g. application architecture, infrastructure, data transfer methods (SFTP), application and database technologies.)
• Experience with business tools covering Jira, Confluence, Share point, and Microsoft 365. Expertise in Jira Dashboards, Confluence documentation.
• Planning/Organizing: Able to run work but also to make the estimate, scheme in detail, work on deployment plans and oversee deadlines.
• Handle the technical roadmap of the application (technology roadmap compliance), estimate/budget capacity needed.
• Expertise in Planning and execution of Releases, Changes, Patches.
• Exposure of handling L3 post, incident analysis, patch preparation and implementation.
• Skilled individual to interact with L2 teams for incident and problem management cases.

Education / Certification / Experience

• Degree-level IT and/or information security qualification, or equivalent background in information Security and IT Security
• General understanding of current security industry standards, best practices, and/or frameworks i.e.: NIST, ENISA, ISO27001, OWASP
• Problem-solving and analytical competencies with the capability to oversee intricate processes
• Aptitude to educate a technical and non-technical audience about different security measure

Preferable

• Understanding of information security tools e.g., security scan and testing tools
• Understanding of cloud engineering and native security features
• Firm understanding of DevSecOps and the banks shift left agenda to integrate security in the software development lifecycle as earliest as possible.
• ISO or ITAO certification (for internals only)
• GCP-Cloud foundation know-how
• Scripting track record in Python, PowerShell and similar scripting tools.

Proven capacity to draw on AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.
 

How we’ll support you

• Training and development to help you excel in your career
• Coaching and support from experts in your team
• A culture of continuous learning to aid progression
• A range of flexible benefits that you can tailor to suit your needs

About us and our teams

Please visit our company website for further information:

https://www.db.com/company/company.html

We at DWS are committed to creating a diverse and inclusive workplace, one that embraces dialogue and diverse views, and treats everyone fairly to drive a high-performance culture. The value we create for our customers and investors is based on our aptitude to bring together different perspectives from all over the world and from different backgrounds. It is our experience that teams carry out better and produce improved outcomes when they are able to incorporate a wide range of perspectives. We call this #ConnectingTheDots.

This ITAO, AVP vacancy is based in (do.