• Collaborate with key stakeholders to assess and identify needs for information security reporting.
• Gather and analyse data on security incidents, vulnerabilities, and threats.
• Create concise and comprehensive reports for management and decision-makers.
• Track risk trends over time and provide insights for risk mitigation strategies.
• Translate risk findings to relevant teams and record their planned actions.
• Ensure reporting fulfils regulatory requirements in all four regions.
• Provide support during conversations between regional CISOs and their regional management.
• Maintain up-to-date knowledge of industry best practices and emerging threats.
• Aling the effort with the group CISO team.
• Support internal and external audits related to information security.

• Currently enrolled in a relevant academic program or up to 5 years of work experience in information security reporting and risk analysis.
• Proven ability to showcase a track record and experience to perform this role effectively.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Proficiency in data analysis tools and software (e.g., Python, PowerBI, CliX, SharePoint, Power Automate).
• Understanding of information security standards and frameworks (e.g., ISO 27001, NIST).
• Ability to work independently and as part of a team.

30 days of vacation; Flexible work; Health and fitness offers; working from home; Work internationally; Diversity; Family & job friendly; Work-life balance

Commerzbank has been present in the Czech Republic with a branch in Prague since 1992. Decades of experience have allowed Commerzbank to gain a true insight into the Czech market, with all its particularities and rules. This in-depth knowledge, combined with our financial expertise, allows us to provide extensive services to both German companies, with presence in the Czech Republic, and international companies with activities in Germany.

Petr Tříska