Exposure Management Data Analyst 100% (f/m/d)

Tasks

• Continuation of research and development into the formalisms underlying our quantitative risk measures: data aggregation, aggregation logic, and formula design for measuring security exposure
• Improving the quality and accuracy of our exposure data. This involves defining, reengineering, and, where possible, automating the extraction, mapping, validation, and transformation of raw or semi-structured data into clean, usable datasets.
• Translate the Security Compliance Team's measurement and reporting requirements into precise technical specifications to ensure that the underlying mathematics, business logic, and data structures are accurately represented in the system
• Managing the creation and continuous improvement of our security questionnaire as a structured data asset: designing its structure, defining its data fields, and—as it matures—developing and maintaining it as a versioned artifact that is accessible to internal stakeholders
• Supporting responses to regulatory audits from a data-driven perspective, providing reproducible data extracts and evidence of the processes and controls used for secure management and reporting
• Key partnership with the Security Compliance Team and other IT and functional areas, serving as a subject matter expert on how to best capture their exposure and security measurement needs within a consistent, cross-functional data model
• Contribution to the standardization of security compliance metrics. Proposal and piloting of new indicators and automated evidence collection, which can then be rolled out across the entire organization
• Develop and maintain search and transformation routines that aggregate parsed security test data and provide it to the security team in the form of structured, searchable, reportable data and standardized dashboards, thereby underpinning the company’s ongoing ability to produce accurate, timely, and explainable compliance reports. This contributes to the overarching goal of an objective, data-driven, and defensible security risk function, in which response frequency, trends, and the impact of remediation can be clearly measured and understood.

Requirements

• Background in mathematical modeling or statistics
• Analytical depth and an obsession with accuracy
• Ability to establish the principles of transparent, verifiable, data-driven management and measurement of exposures
• Ability to define and refine the underlying mathematical models for these measures and to integrate them into a reporting infrastructure and the associated data governance framework
• Ability to oversee the development of documentation and automate the creation of safety assessment questionnaires and responses