The Info Security Tech Sr Analyst is an intermediate level position responsible for leading efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.

Responsibilities:

• Assist Security Incident Response Teams with incident investigations and aid in technical risk assessments
• Coordinate with system development and infrastructure units to identify Information Security (IS) risks and the appropriate controls for development, day-to-day operation, and emerging technologies
• Perform regular assessments based on changes in the threat landscape
• Monitor vulnerability assessments and ethical hacks, ensuring that issues are addressed for the applications that they support
• Provide information security support with related activities during systems development (e.g. authentication, encryption)
• Identify and develop new and improved technical procedures and process control manuals
• Identify significant IS threats and vulnerabilities
• Assume informal/formal mentorship role within teams and assist with the coaching and training of new team members
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Qualifications:

• 5-8 years of relevant experience
• Consistently demonstrates clear and concise written and verbal communication
• Proven influencing and relationship management skills
• Proven analytical skills

Education:

• Bachelor’s degree/University degree or equivalent experience

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

• Manage the business-as-usual (BAU) scheduling and patching of critical cybersecurity infrastructure.
• Collaborates with engineering, application, and system administration teams to troubleshoot, resolve issues, and reapply patches to meet deadlines, preventing overdue infrastructure VTMs.
• Manage multiple tools upgrades to mitigate security risks and maintain infrastructure stability and performance. 
• When provided solutions are ineffective, work with engineering to develop and implement fixes.
• Investigate and resolve security issues that may persist after patching, such as dependencies requiring updates or removal.
• Focuses on optimizing employee productivity by automating processes to enhance performance and reduce risk.

------------------------------------------------------

Job Family Group:

Technology

------------------------------------------------------

Job Family:

Information Security

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Most Relevant Skills

Please see the requirements listed above.

------------------------------------------------------

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

 

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.