Product Owner (DLP Engineering) (m/f/diverse)

The company

Commerzbank is a leading international commercial bank with branches and offices in almost 50 countries. The world is changing, becoming digital, and so are we. We are leaving the traditional bank behind us and we are choosing to move forward as a digital enterprise.

As part of this strategy, Commerzbank continues the expansion of its Digital Technology Center in Sofia, Bulgaria. We need motivated people who will join us on this journey and we are looking for a Product Owner (DLP Engineering) in our Cyber Defense & Base Services team.

Your tasks:

Defining and owning the vision, roadmap, and backlog for Data Loss / Leakage Prevention products and solutions across the bank.
Partnering with stakeholders (IT Security, Risk, Compliance, Business Units) to gather requirements, prioritize initiatives, and align with regulatory obligations.
Translating business and regulatory needs into clear product requirements and user stories.
Overseeing the end-to-end lifecycle of DLP controls and technologies (endpoint, email, cloud, network).
Collaborating with engineering and security operations teams to ensure effective design, deployment, and monitoring of DLP controls.
Monitoring KPIs, effectiveness, and adoption of DLP solutions; providing reporting to senior management and regulators as required.
Staying up to date on emerging cyber threats, data protection regulations, and industry best practices in data loss prevention.
Driving continuous improvement of DLP processes, including incident handling, tuning, and user awareness.
Managing vendor relationships and evaluating new tools/technologies in the DLP space.

Your profile:

10+ years of relevant experience in cybersecurity, including 5+ years in a functional leadership role, preferably within the Banking and Finance industry.
Minimum of Bachelor’s degree or equivalent with a focus on information security.
Professional certifications such as CISSP, GEIR, GCTI, GREM, or equivalent are preferred.
Solid knowledge of data protection regulations.
Hands-on understanding of DLP technologies (e.g. Microsoft Purview, Proofpoint, Symantec, Palo Alto Network DLP, etc.) and their application across endpoints, cloud, and networks.
Strong stakeholder management and communication skills, able to balance security requirements with business needs.
Experience working in Agile / Scrum environments.
Strong analytical and problem-solving skills.
Ability to translate complex technical issues into clear business language.
Excellent communication and presentation skills in English (German a plus).

In return, we offer:

Good work-life balance, including 25 days annual paid leave (increasing with 1 day per year up to 31 in total), flexible working hours, work-from-home and work from abroad opportunities;
Luxury package of additional health and dental insurance;
Food vouchers in the amount of 128 BGN monthly;
Employee assistance program for psychological, financial, and legal consultations;
Multisport card;
Annual contribution of 300 BGN net per child for a summer camp/school/kindergarten for children up to age of 15;
Possibilities for building career-advancing skills by covering training/certification courses and conferences based on individual learning and development needs, access to an online learning platform;
Opportunities for long-term professional development in a stable, 150-year-old company while contributing to the vision of a new, just starting Digital Technology Center;
Friendly and supportive multicultural environment, open to new opinions and ideas.

Commerzbank is proud to be an equal opportunity employer, committed to creating a diverse environment. All qualified applicants will receive consideration for employment without regard to gender, race, color, national origin, religion, gender identity or expression, sexual orientation, genetics, disability, age, or any other characteristics.

Challenge accepted? Apply now with your up-to-date CV in English!

Only shortlisted candidates will be invited to interview.

Източник