Technical Product Manager (Cryptographic Inventory)

Commerzbank is a leading international commercial bank with branches and offices in almost 50 countries. The world is changing, becoming digital, and so are we. We are leaving the traditional bank behind us and we are choosing to move forward as a digital enterprise.
As part of this strategy, Commerzbank continues the expansion of its Digital Technology Center in Sofia, Bulgaria. We are looking for motivated people who will join us on this journey.

Our Cyber Defense and Base Services team is looking for:

Technical Product Manager (Cryptographic Inventory)

Cluster Cyber Defense & Base services provides 1. LoD activities within the Commerzbank Cyber Security Organsation. In addition, to these operational topics the cluster also develops and operates a variety of security tools which are used by the operational units SOC and Threat Intelligence. The team works together to ensure that valuable functionalities are provided to customers, and that existing products, processes and services are developed and improved in line with customer needs. To achieve this, the team members organise their own activities, working autonomously and with full accountability. Open communication and feedback are key to adopt a fail-fast approach – recognise mistakes and move forward in the right direction.

As a Technical Product Manager for Cryptographic Inventory, you are responsible for the overall technical implementation and management of the cryptographic inventory throughout its entire lifecycle. You work at the interface between the Product Owner, Engineering, Platform, Integration, and Operations teams to ensure a secure, resilient, and high-quality solution.

Your responsibilities:

• Providing overall technical responsibility for the cryptographic inventory or cryptography register throughout its full lifecycle.
• Developing actionable, scalable technical solution concepts for components, interfaces, data flows, information models, validation, and automation.
• Operationalising the target architecture and technical guardrails, while preparing and coordinating required architecture decisions, exceptions, and enhancement needs.
• Coordinating Engineering, Platform, Integration, and Operations teams from a technical perspective and managing cross-system dependencies, technical risks, and impediments.
• Ensuring compliance with technical standards and quality criteria for security, availability, performance, scalability, maintainability, and resilience, including defining appropriate testing and release criteria.
• Ensuring release and operational readiness, including deployment, monitoring, logging, documentation, support, and handover to regular operations.
• Providing technical oversight of ongoing operations, including analysing and sustainably resolving technical incidents, vulnerabilities, data-quality issues, and recurring root causes.
• Managing technical improvements and the maintenance, updating, and timely replacement of outdated components and technologies in close coordination with the Product Owner and relevant stakeholders.

Your skills and experience:

• Proven ability to develop scalable technical solution concepts for components, interfaces, data flows, and integrations.
• Strong capability to translate target architecture principles into practical solutions and coordinate architecture decisions and exceptions.
• Demonstrated technical leadership in coordinating Engineering, Platform, Integration, and Operations teams.
• Expertise in managing cross-system dependencies, technical risks, impediments, and the sustainable resolution of incidents.
• Sound understanding of technical standards relating to security, availability, performance, scalability, and resilience.
• Hands-on experience managing the end-to-end release lifecycle, including testing, deployment, monitoring, operational readiness, and handover to operations.
• Ability to translate functional, business, and regulatory requirements into clear and detailed technical specifications.
• Proven track record of creating technically assessed backlog items, acceptance criteria, and implementation requirements for engineering teams.
• Solid knowledge of cryptographic mechanisms, PKI, cryptographic inventories, and Post-Quantum Cryptography (PQC).
• Familiarity with the technical implementation of regulatory requirements, including DORA and the Cyber Resilience Act (CRA).

Commerzbank is proud to be an equal opportunity employer, committed to creating a diverse environment. All qualified applicants will receive consideration for employment without regard to gender, race, color, national origin, religion, gender identity or expression, sexual orientation, genetics, disability, age, or any other characteristics.

Challenge accepted? Apply now with your up-to-date CV in English!

Due to the high volume of applications, we contact only the candidates who best match the role requirements. If you do not hear from us within 14 days, please consider that we won't proceed with your application at this stage.

Our offer

25 days paid leave

1 additional day for each year

Health Insurance

EUR 80

Food vouchers

6 days sick leave

Without sick leave sheet

Flexible work arrangements

Home Office Policy

Annual Contribution

for children summer camp

Sports and Wellbeing

Multisport

Initiatives