Cloud Information Security Specialist

Cloud Information Security Specialist

Purpose Intro

Deutsche Bank has begun a major business and technology program to adopt public cloud services, including announcing a ten-year partnership with Google.

One critical success factor for this cloud adoption is to ensure that the Bank’s use of cloud services is secure. Therefore, the Bank’s security team, the Chief Security Office, has set up a Cloud Security Enablement program to embed security into its cloud environments, and integrate into its overall range of information security capabilities.

Within Cloud Security Enablement, one team is focused on Cloud Security Engineering. This team specializes in developing in-cloud security controls, using “infrastructure as code” and “policy as code” techniques, and a mix of cloud-native and third party solutions.

The majority of the team’s work is currently in Google Cloud Platform, with a small proportion in Microsoft Azure.

The team began in the UK and is now expanding in Bucharest. It reports functionally to the Cloud Security Engineering lead in the UK.

Role Intro 

This role will be one of the first members of this team in Bucharest, building and maintaining security capabilities and policies in Google Cloud Platform and Azure, and using associated security tools. The role will also help the overall team manage its work efficiently using agile ways of working, and associated tools such as Jira.

Responsibilities

In this role you will:

• Develop and enhance security controls for Deutsche Bank’s Google Cloud and Microsoft Azure infrastructure, ensuring compliance with security reference architectures.
• Implement security solutions by consulting with security specialists, using infrastructure-as-code (e.g., Terraform), and enforcing policy-as-code rules during CI/CD and runtime.
• Deliver and integrate in-cloud security features such as access management, logging, monitoring, and network security to support the Chief Security Office.
• Act as an internal security expert on native cloud security features, advising teams on security improvements and best practices.
• Collaborate with engineering teams to enhance cloud security tooling and, if required, embed as a security engineer within development teams to implement security controls directly.

Skills:

Essential:

• Degree in IT/information security or equivalent experience, with strong written and spoken English skills.
• Experience with Google Cloud Platform, Microsoft Azure, AWS, and CI/CD tools.
• Knowledge of Scrum, Jira, and agile software/system development.
• Familiarity with setting up and managing public and hybrid cloud environments.
• Understanding of key information security principles and techniques.

Desirable:

• Certifications: Security, cloud infrastructure, or architecture certifications (e.g., Google Cloud, Azure, Terraform).
• Security & DevOps Tools: Experience with CI/CD, version control (GitHub/GitLab), and Cloud Security Posture Management tools.
• Knowledge of Behavior-Driven Development (BDD) using Cucumber, Gherkin, and TypeScript.
• Experience in cloud platform security and engineering (Google Cloud, Azure).
• Working in international, complex, and regulated environments with audit, control, and risk functions.

Well-being & Benefits

Emotionally and mentally balanced:

• Empowering managers who value your ideas and decisions. Show your positive attitude, determination, and open-mindedness.
• A professional, passionate, and fun workplace with flexible Work from Home options.
• A modern office with fun and relaxing areas to boost creativity.
• Continuous learning culture with coaching and support from team experts.

Physically thriving:

• Private healthcare and life insurance with premium benefits for you and discounts for your loved ones.

Socially connected:

• Kids@TheOffice - support for unexpected events requiring you to care for your kids during work hours.
• Enjoy retailer discounts, cultural and CSR activities, employee sport clubs, workshops, and more.

Financially secure:

• Competitive income, performance-based promotions, and a sense of purpose.
• 24 days holiday, loyalty days, and bank holidays (including weekdays for weekend bank holidays).

Culture Outro

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.