Job Summary

Project Manager / Technical Lead – Vulnerability Enrichment Tool (VET) Close & Verify Governance

Job Description Summary

The Project Manager / Technical Lead will be responsible for coordinating, governing, and driving the end-to-end Vulnerability Enrichment Tool (VET) Close & Verify process across all CIO areas. This role acts as the central point of coordination between Engineering teams, Application Owners, SMEs, Security teams, and senior stakeholders to ensure timely remediation, verification, reporting, and governance of vulnerability management activities.

The successful candidate will combine strong project management, technical leadership, stakeholder management, and operational governance skills to drive remediation outcomes, improve process effectiveness, and enhance adoption of VET and Control Workbench (CWB) capabilities across Deutsche Bank Technology.

Education

Bachelor's / Master's Degree in Computer Science, Information Technology, Engineering, Cyber Security, Mathematics, or equivalent practical experience.

Experience

• 10+ years of professional experience in Technology, Cyber Security, Risk Management, Application Development, Infrastructure, or Technology Governance functions.
• 5+ years of project/program management experience managing complex cross-functional initiatives.
• Proven experience working with technology engineering teams, application owners, and senior stakeholders.
• Experience delivering large-scale remediation, transformation, or regulatory initiatives.
• Experience operating within global organizations and distributed teams.
• Strong knowledge of SDLC, DevOps, Vulnerability Management, and IT Risk Management frameworks.
• Experience working within regulated financial institutions is highly desirable.

Key Responsibilities

Key Responsibilities

VET Close & Verify Governance

• Lead and coordinate the VET "Close & Verify" process across all CIO organizations.
• Drive vulnerability remediation activities from identification through closure verification.
• Ensure timely review and disposition of vulnerability buckets generated through VET.
• Coordinate with ITAOs, Delegates, Engineers, Developers, SMEs, and Security teams to achieve remediation targets.
• Govern vulnerability remediation KPIs, SLAs, and risk reduction objectives.
• Track remediation progress and escalate risks, blockers, and aging vulnerabilities where appropriate.
• Drive continuous improvement of vulnerability handling processes and governance controls.

Stakeholder Management

• Serve as the primary point of contact between CIO teams, CSO Cyber Hygiene teams, engineering functions, and governance forums.
• Facilitate daily and weekly remediation review sessions with engineering teams.
• Coordinate cross-functional working groups to resolve complex vulnerability remediation challenges.
• Present status updates, metrics, risks, and remediation progress to senior management.
• Build effective relationships across Technology, Information Security, Risk, and Audit stakeholders.

Operational Effectiveness & Process Improvement

• Drive automation opportunities across vulnerability ingestion, analysis, remediation tracking, and reporting.
• Identify process bottlenecks and implement operational improvements.
• Support enhancement initiatives within Control Workbench (CWB) and VET.
• Promote end-to-end traceability from vulnerability identification through close and verify activities.
• Support onboarding, training, awareness, and adoption activities across the Technology organization.

Reporting & Governance

• Monitor and report on:
• Vulnerability remediation progress
• Open and overdue findings
• Exception management status
• Risk exposure trends
• CIO and application-level performance metrics
• Support governance forums and steering committees with actionable insights and recommendations.
• Ensure audit-ready evidence and remediation traceability are maintained.

Risk & Exception Management

• Coordinate central exception review processes.
• Ensure proper documentation and approval of risk acceptances and exceptions.
• Validate remediation evidence submitted by engineering teams.
• Support regulatory, audit, and internal review activities relating to vulnerability management.

Skill Requirements

Mandatory Skills

Project & Program Management

• Strong project management and delivery leadership experience.
• Experience managing multiple concurrent workstreams across global organizations.
• Proven ability to drive delivery against challenging timelines.
• Strong planning, prioritization, and organizational skills.
• Experience managing executive stakeholders and governance forums.

Technical Leadership

• Strong understanding of software engineering and infrastructure environments.
• Working knowledge of:
• Vulnerability Management
• Application Security
• SDLC
• DevOps
• Cloud Platforms
• Infrastructure Operations
• Ability to engage effectively with developers, engineers, architects, and security professionals.
• Experience translating technical issues into management-level reporting.

Communication & Stakeholder Management

• Excellent verbal and written communication skills.
• Strong facilitation and workshop leadership skills.
• Ability to influence stakeholders at all organizational levels.
• Experience working with senior technology executives and governance bodies.

Preferred Skills

• Experience with vulnerability management platforms.
• Experience using Control Workbench (CWB) or similar governance tooling.
• Knowledge of vulnerability assessment frameworks including:
• CVE
• CVSS
• Vulnerability Scanning methodologies
• Cyber Hygiene processes
• Knowledge of patch management and infrastructure remediation processes.
• Experience working on regulatory remediation programs.
• Experience in audit, risk, compliance, or governance functions.
• Familiarity with Agile, Scrum, and DevOps delivery models.
• Knowledge of ServiceNow, JIRA, Confluence, and Power BI.

Core Competencies

• Strong leadership and influencing skills.
• Excellent analytical and investigative abilities.
• Ability to operate effectively under pressure and manage competing priorities.
• Strong ownership mindset and attention to detail.
• Customer-focused and outcome-driven approach.
• Excellent collaboration and relationship-building skills.
• Ability to drive change and process transformation.
• Commitment to operational excellence, governance, and continuous improvement.

Success Measures

The successful candidate will be accountable for:

• Reduction in aging vulnerabilities and open remediation backlog.
• Improved Close & Verify completion rates across CIO areas.
• Increased remediation and verification accuracy.
• Enhanced operational efficiency through automation.
• Improved dashboard transparency and management reporting.
• Strong governance, auditability, and end-to-end traceability.
• Effective stakeholder engagement and process adoption.
• Reduction of risk exposure across Technology platforms.

Other Requirements

NA