Cyber Security Risk, Controls & Assurance, VP

Job Description:

Employer: DWS Group

Title: Cyber Security Risk, Controls & Assurance, VP

Location: Madrid

Job Code: placeholder for LinkedIn job wrapping

About DWS

Today, markets face a whole new set of pressures - but also a whole lot of opportunity too. Opportunity to innovate differently. Opportunity to invest responsibly. And opportunity to make change.

Join us at DWS, and you can be part of an industry-leading firm with a global presence. You can lead ambitious opportunities and shape the future of investing. You can support our clients, local communities, and the environment.

We're looking for creative thinkers and innovators to join us as the world continues to transform. As whole markets change, one thing remains clear; our people always work together to capture the opportunities of tomorrow.

As investors on behalf of our clients, it is our role to find investment solutions. Ensuring the best possible foundation for our clients' financial future. And in return, we'll give you the support and platform to develop new skills, make an impact and work alongside some of the industry's greatest thought leaders. This is your chance to achieve your goals and lead an extraordinary career.

This is your chance to invest in your future.

Read more about DWS and who we are here.

Team / division overview

DWS is transforming its Technology function and growing its internal capabilities. As AI and other emerging technologies continue to reshape the business and threat landscape, we are building a focused AI Security capability that brings together the right mix of cybersecurity, engineering, architecture, data protection, offensive security, and risk expertise. These roles will help grow and evolve our security function so we can securely enable innovation while identifying and managing new and rapidly developing risks. You will be a key member of this team, and an important part of our journey to build a scalable, forward-looking AI Security capability.

The candidate for this role reports into the DWS CSO AI Security CoE Lead and will be a key member of the AI Security Team. The Cyber Security Risk, Controls & Assurance VP is responsible for establishing AI security risk and control processes that support secure AI adoption and evolving regulatory expectations.

Your responsibilities -

As a Cyber Security Risk, Controls & Assurance, VP you will:

• Develop and maintain the AI security control framework and assurance methodology.
• Map technical requirements to policies, standards, regulatory expectations, and audit evidence.
• Coordinate AI risk assessments and control testing.
• Support third-party and vendor AI security assurance.
• Develop AI security KRIs/KPIs and support executive, risk, compliance, and audit reporting.

We are looking for

• 8+ years of cybersecurity risk, technology risk, vulnerability management governance, controls, audit, or assurance experience, with recent exposure to AI/ML and GenAI risk.
• Strong experience with vulnerability risk-rating, remediation governance, exception management, control testing, metrics, escalation, and executive reporting.
• Experience mapping technical vulnerabilities and emerging threats to policies, standards, regulatory requirements, evidence, and third-party assurance processes.
• Ability to adapt established cyber risk and vulnerability management practices to rapidly evolving frontier AI threats.
• Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.

What we'll offer you

At DWS we're serious about diversity, equity and creating an inclusive culture where colleagues can be themselves and it's important to us that you enjoy coming to work - feeling healthy, happy and rewarded. At DWS, you'll have access to a range of benefits which you can choose from to create a personalised plan unique to your lifestyle. Whether you're interested in healthcare, company perks, or are thinking about your retirement plan, there's something for everyone.

DWS' Hybrid Working model is designed to find the right balance between in-person collaboration and engagement in the office, which is core to our working culture, and working from home. Each business group varies on the split between time spent in the office and at home, but this will be discussed and made clear as part of your application and interview process. We will continue to review and evolve our working environments and methods to ensure that we are working in the best way possible for our people.

If you require any adjustments or changes to be made to the interview process for any reason including, or related to a disability or long-term health condition, then please contact your recruiter and let them know what assistance you may need. Examples of adjustments include providing a change to the format of the interview, or providing assistance when at the DWS office. This will not affect your application and your recruitment team will discuss options with you.

Our values define the working environment we strive to create - diverse, supportive and welcoming of different views. We embrace a culture reflecting a variety of perspectives, insights and backgrounds to drive innovation. We build talented and diverse teams to drive business results and encourage our people to develop to their full potential. Talk to us about flexible work arrangements and other initiatives we offer.

We promote good working relationships and encourage high standards of conduct and work performance. We welcome applications from talented people from all cultures, countries, races, genders, sexual orientations, disabilities, beliefs and generations and are committed to providing a working environment free from harassment, discrimination and retaliation.

We at DWS are committed to creating a diverse and inclusive workplace, one that embraces dialogue and diverse views, and treats everyone fairly to drive a high-performance culture. The value we create for our clients and investors is based on our ability to bring together various perspectives from all over the world and from different backgrounds. It is our experience that teams perform better and deliver improved outcomes when they are able to incorporate a wide range of perspectives. We call this #ConnectingTheDots.