Job Description
Job Title: Patch Management Governance & Reporting Support Location: Birmingham Corporate Title: Assistant Vice President
The Patch Management Team governs the end-to-end patching process, ensuring vulnerabilities are assessed, patches are tested and deployed, and compliance is tracked against policy and remediation timelines aligned to regulatory expectations.
The team works with Technology Owners, Engineering Leads, and CSO (Chief Security Office) to manage patch risks, oversee remediation progress, drive compliance, and report patching performance to required governance forums.
You will be responsible for enabling technology teams to meet Patch Management requirements and KPIs through accurate reporting, robust governance, and sustainable controls. Leading audit remediation, technology onboarding, management reporting, standards, process documentation, and user training across the patch management lifecycle.
Your key responsibilities
- Assisting Technology units to be compliant with the Patch Management KOD and exceed Key Performance Indicators (KPIs). Requirement to work closely with technology units to ensure accurate, complete, and consistent patch reporting is established, sustained and timely and regularly provided.
- Establishing and operating new governance procedures and controls. Establishing and being involved in the effective and consistent operation of both new and enhanced sustainable patch management governance processes, solutions and capabilities.
- Having ownership and/or participating extensively in audit remediation and compliance related activities relating to the robust governance of the Patch Management process, which may include, but not limited to: the identification and establishment of new or enhanced KPIs and related IT risk/senior management reporting, the establishment of new and/or enhanced governance capabilities and associated reporting, the onboarding of additional and/or new technologies into the reporting and governance services of the centralized GTI Patch Management function, and the creation of new or enhanced patch management standards and guidelines.
- Responsibility for maintaining working instruction documentation and user training materials and will be expected to identify update requirements and ensure such updates are agreed and applied.
About us
Deutsche Bank is the leading German bank with strong European roots and a global network. Click here to see what we do. We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.
What we’ll offer you
A healthy, engaged and well-supported workforce are better equipped to do their best work and, more importantly, enjoy their lives inside and outside the workplace. That’s why we are committed to providing an environment with your development and wellbeing at its centre.
You can expect: * Hybrid Working - we understand that employee expectations and preferences are changing. We have implemented a model that enables eligible employees to work remotely for a part of their working time and reach a working pattern that works for them. * Competitive salary and non-contributory pension. * 30 days’ holiday plus bank holidays, with the option to purchase additional days. * Life Assurance and Private Healthcare for you and your family. * A range of flexible benefits including Retail Discounts, a Bike4Work scheme and Gym benefits. * The opportunity to support a wide ranging CSR programme + 2 days’ volunteering leave per year. * Training and development to help you excel in your career. * Coaching and support from experts in your team. * A culture of continuous learning to aid progression.
Your skills and experience
- Experience working in large scale technology programs / Operations teams with a range of stakeholders simultaneously with limited supervision and guidance.
- Experience in undertaking risk management activities e.g. operating/performing control governance duties, identifying new risks etc.
- Knowledge of various IT project methodologies and life cycles (Information Technology Infrastructure Library and software development life cycle).
- Awareness of the Vulnerability Management processes.
- Very good understanding of patch management and a broad technical understanding of IT infrastructure technologies and how they operate, especially regarding how patches are managed and applied.
- Proven ability to leverage AI tools to enhance productivity, optimize workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.
