Advanced Expert Technical Exposure & Vulnerability Management

LBBW is one of Germany's leading banks and an innovative, international company in the financial sector. We are a reliable bank and know what it means to change. Digitalization, agility and efficiency are not just buzzwords for us, but constant companions of our own development. Because only those who change themselves understand what it takes. We offer an environment that promotes personal and professional development. With over 10,000 employees, we are shaping the future of the financial world – together #NeuesSchaffen. The Group IT Security Protection & Prevention is essentially responsible for the proactive avoidance of cyber risks through preventive measures, vulnerability management and ensuring global infrastructure security. We achieve this through the identification, assessment and initiation of the remediation of vulnerabilities and hardening gaps, through the protection of endpoints and the definition and assurance of the implementation of secure network structures. We are the first point of contact for questions about vulnerabilities, patches, EDR/XDR or technical protective measures.

Participation in group-wide Technical Exposure & Vulnerability Management in an international and complex banking environment. Assessment, prioritization and control of technical risks and real attack paths taking into account threat situation, criticality, operational reality, feasibility and economic efficiency. Control of sustainable risk reduction across different platforms, providers, foreign locations and subsidiaries. Creation of a common understanding of technical risks, priorities and necessary measures across infrastructure, platform, cloud and operational interests. Assessment of modern attack techniques, new attack vectors and AI-supported attack methods and derivation of pragmatic protective and hardening measures. Sparring partner for infrastructure, platform, cloud and security teams on technical risks, conflicts of interest, prioritization and transformation issues.

Several years of practical experience in the field of technical cybersecurity, technical exposure management, vulnerability management, infrastructure security or enterprise security in complex corporate or banking environments. Good technical understanding of modern attack vectors, infrastructure, network, cloud and platform technologies as well as typical attacker tactics. Ability to reliably and realistically assess technical risks, real attack paths and vulnerabilities in complex and heterogeneous enterprise IT landscapes. Experience in platform and/or provider environments in the tension between legacy systems, modern technologies and international operating models. Ability to professionally moderate technical conflicts of interest and priorities and to drive sustainable solutions in the interest of the overall organization. Fluent German skills (C1) and English skills (B2) in written and spoken form.