Job
- Level
- Erfahren
- Job Feld
- IT, Security
- Anstellung
- Teilzeit / Vollzeit
- Vertragsart
- Unbefristetes Dienstverhältnis
- Ort
- Frankfurt am Main
- Arbeitsmodell
- Hybrid, Onsite
Job Zusammenfassung
In dieser Rolle analysierst du Sicherheitsvorfälle systematisch, identifizierst Muster und ergreifst Maßnahmen zur Ursachenbeseitigung, um wiederkehrende Probleme im Sicherheitsbereich zu verhindern.
Job Technologien
Deine Rolle im Team
- As a Security Problem Manager, you will be responsible for the systematic analysis and processing of security incidents with the aim of eliminating recurring disruptions in the long term.
- You will identify patterns, weaknesses and systemic risks, initiate root cause analyses and steer the implementation of sustainable measures in close cooperation with relevant units.
- In doing so, you will be guided by established ITIL methods as well as regulatory requirements of the banking environment (e.g. BAIT, MaRisk).
- The focus is on sustainable risk reduction through the structural processing of problems, not on the rapid restoration of operational capability (MTTR).
- The aim is to eliminate causes and prevent recurring incidents.
- The sustainable pursuit of audit-relevant topics is also part of the field of responsibility.
- You will work primarily with the Security Incident Management Team, the CyberHygiene Team and the 2nd LoD functions (risk management).
- Development and control of a structured security problem management process.
- Systematic evaluation of security incidents (e.g. SOC data, SIEM, threat intelligence).
- Identification of recurring patterns and causes as well as performance of trend and clustering analyses.
- Leading root cause analyses (e.g. using 5-Why, Ishikawa,...).
- Identification of technical, organizational and procedural causes as well as their risk assessment.
- Documentation of problem causes in a central register.
- Definition and implementation of sustainable measures for risk reduction (no pure workarounds).
- Control and follow-up of measures, including success monitoring (post-implementation review).
- Development of KPIs/KRIs to reduce recurring problems.
- Preparation of regular reports for CISO, IT steering committees and risk management.
- Preparation of decision templates and reporting on trend analyses and risk areas.
- Support in internal and external audits (audit, supervisory authorities).
Unsere Erwartungen an dich
Ausbildung
- Bachelor's degree or higher in information security, computer science, computer engineering, or a related field.
Qualifikationen
- Sound knowledge of: Incident response and SOC processes, ITIL Problem Management and Root Cause Methods, risk management as well as regulatory requirements (e.g. BAIT, MaRisk, DORA).
- Familiarity with typical attack vectors (e.g., MITRE, ATT&CK).
- Strong analytical and systemic thinking skills.
- Ability to communicate technical and complex issues in a clear and structured manner.
- High level of ownership, assertiveness and sustainability orientation.
- Strong communication and moderation skills, especially in stakeholder management.
- Ideally, the following certifications: CISSP, GCIH, ITIL v4/v5, CISM.
Erfahrung
- Several years of professional experience in the cyber security environment, ideally in a regulated industry such as banking or financial services.
- Experience working with SIEM/case management systems and analytically evaluating incident data.
Unser Angebot
- 30 days of vacation.
- Flexible work.
- Employee conditions.
- Professional training & development.
- Capital-forming benefits.
- Friendly work environment.
- Diverse tasks.
- Work-life balance.
Benefits
Work-Life-Integration
Mehr Netto
Gesundheit, Fitness & Fun
Themen mit denen du dich im Job beschäftigst
Job Standorte
Das ist dein Arbeitgeber
Commerzbank AG
Die Commerzbank ist eine international agierende Geschäftsbank mit rund 49.000 Mitarbeitern und Standorten in nahezu 50 Ländern. Sie ist in den beiden Geschäftsbereichen Privat- und Unternehmerkunden sowie Firmenkunden tätig und bietet ihren Kunden ein umfassendes Portfolio an Finanzdienstleistungen an.
Description
- Unternehmensgröße
- 250+ Employees
- Unternehmenstyp
- Etablierte Firma
- Arbeitsmodell
- Full Remote, Hybrid, Onsite
- Branche
- Banken, Finanz, Versicherung
Dev Reviews
by devworkplaces.com
Gesamt
(1 Bewertung)3.6
Workingconditions
4.4Engineering
3.2Career Growth
3.6Culture
3.5
Security Problem Manager/Engineer Operations
- Ort
- Frankfurt am Main
- Arbeitsmodell
- Hybrid, Onsite
- Diversität
- Für alle Personen geeignet (m/w/d)
- Nur Englisch
- Nur Englisch erforderlich
