Your area of work:
As a working student (f/m/d) you will support the team in the Group Security (CIO / COO) - IS Risk Management department.
Your responsibilities:
- Conduct information security risk assessments: You will assist specialists in evaluating technical security and cyber risks across enterprise applications, cloud platforms, IT infrastructure, and emerging technology such as, Artificial Intelligence (AI and Machine Learning) solutions.
- Review security policy exceptions and baseline compliance: You will support the logging and preliminary technical review of security exception requests, evaluating deviations from IT security baselines and assessing proposed compensating controls.
- Track risk remediation and manage risk registers: You will take joint responsibility for maintaining the team's central risk and exception register, tracking remediation milestones, and following up on open mitigation actions with technical asset owners.
- Design automated risk dashboards and reporting: You will build, update, and maintain Key Risk Indicator (KRI) and Key Performance Indicator (KPI) on risk metric dashboards and management presentations using data analytics and visualisation tools such as Microsoft Power BI and advanced Excel.
- Develop automation workflows and process improvements: You will create and maintain small automation scripts (e.g. using Python or workflow tools) to streamline manual data collection, ticketing workflows, and routine reporting processes.
- Contribute to regulatory alignment and security governance: You will support governance initiatives by researching cybersecurity industry standards, mapping technical controls to financial sector regulatory requirements, and documenting standard operating procedures.
Your profile:
- Enrolment (Mandatory): You are enrolled during the entire period of activity at a state-recognised university as a regular student and have completed at least two semesters (study focus in computer science, business informatics, information security, data science, mathematics, economics, or a related discipline).
- Technical skills & competencies (Required): You possess a solid foundational understanding of risk management concepts/lifecycle, information security principles and basics of Artificial Intelligence Concepts, alongside strong proficiency in Microsoft Excel and PowerPoint.
- Language skills (Required): You are fluent in written and spoken English; knowledge of German is an advantage.
- Soft skills & working style (Required): structured and independent working style, strong analytical thinking, and excellent teamwork and communication skills, you easily grasp complex technical topics and integrate seamlessly into our team.
- Prior practical experience (Desirable): Ideally, you have already gained first practical experience through internships or student projects in the context of information security, IT risk management, and software engineering, data analytics.
- Tooling & scripting knowledge (Desirable): Hands-on experience with data visualisation tools (e.g. Microsoft Power BI), scripting languages for automation (e.g. Python), or collaboration platforms (such as Jira and Confluence) is considered a distinct advantage
You can look forward to our benefit package
- Hybrid Work and Flexible working hours
- Health & Wellbeing - fully covered Multisport card
- Meal allowance for each working day (paid directly to your salary)
- Flexible Benefit Account (Pluxee) - 300 per month
- Referral bonus - for a successful recommendation of your friend worldwide