Information Security Officer

Job Description

Discover your future at Citi Working at Citi is far more than just a job. A career with us means joining a team of more than 230,000 dedicated people from around the globe. At Citi, you'll have the opportunity to grow your career, give back to your community and make a real impact.

Engineer the future of global finance. At Citi, our Tech team doesn't just support finance - we are helping to redefine it. Every day, $5 trillion crosses through our network. We do business in 180+ countries operating at a scale few can match. From deploying advanced AI to helping shape global markets, we build systems that matter. Look to join a team where your work helps influence economies, your ideas can drive innovation and outcomes, and your growth is backed by mentorship, continuous learning and flexibility with potential hybrid work opportunities.

Help solve real-world challenges that touch millions and get the opportunity to build the future of finance with Citi Tech.

The Information Security Technology Lead Analyst is a senior level professional position responsible for driving efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.

• Identify opportunities to automate and standardize information security controls and for the supported groups
• Support technical and business teams to resolve any vulnerabilities or issues detected in an application or infrastructure
• Act as a trusted advisor to business and technology teams, providing pragmatic guidance on cybersecurity risks, controls, and requirements.
• Translate technical security concepts into business-relevant language to inform leadership decisions and drive action.
• Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions
• Direct the development and delivery of secure solutions by coordinating with business and technical contacts
• Participate in information security assessments across applications, infrastructure, and business processes, ensuring that non-compliant items are addressed in coordination with relevant stakeholders.
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.
• Contribute to the growth of less technical colleagues through knowledge-sharing, contextual guidance, and translating complex security concepts into practical understanding.

• The Cyber Information Security Officer is responsible for providing expert Cyber Security support and leadership to the Client organization.
• This position will provide consistent Cyber Security guidance to various business teams on the Citi Information Security Cyber security policies, procedures, and standards.
• The Cyber Information Security Officer will provide operational support, intelligence gathering, project and program management, analysis and report development, publishing, and briefing to Senior business leadership and Cyber Security leadership.
• This position will require substantial collaboration with business and Cyber Security professionals ensuring timely and appropriate Cyber security support for your assigned business area.
• Day-to-day tasks will be providing direction with business leaders on the requirements for brand protection, email security, project security, application security, vulnerability assessments, and other programs to address regulatory and statutory requirements for Citi and our business partners. You will be responsible for interactions with partners, third party vendors, employees, and a variety of internal and external stakeholders that require the team's services.
• Besides managing aspects of the day-to-day function of these programs,…