We are seeking a highly motivated candidate to take ownership, to assess the technology risks associated with SaaS/PaaS applications across Banking business. Candidate will be responsible for adhering IS risk and ensuring controls and compliance guidance across Banking Tech inhouse/vendor SaaS/PaaS platforms by ensuring compliance with Citi IS standards, policies, and procedures. The individual will have strong technical acumen and domain knowledge for secure application deployment in Cloud (SaaS, IaaS, PaaS), and associated controls.  You will join an elite team of some of the smartest minds in the technology and business that have been tasked with design and secure deployment and adoption of public Cloud to ensure that they are highly resilient from Internet-borne threats. You will work on some of the most cutting-edge technologies and provide value by solving real world problems that our industry as a whole is facing. Your key stakeholders will be Citi Cloud security domain architects, application development teams, external vendor technology team, Citi internal vulnerability assessment teams and the Citi IS organization as a whole. The candidate will work closely with colleagues in other regions to ensure successful operation as a global team using a “follow the sun” service model.

Banking  Technology is looking for an experienced ‘Technology Senior Security Analyst’.

We are looking for an avid Tech Sr Security Lead Analyst who -

• Work closely with Business, Vendor(3rd Party) Senior Management, collaborate as Tech SME to drive product adoption, Citi onboarding of the SaaS/PaaS platform(s)
• Collaborate effectively with colleagues globally, sharing information and knowledge effectively.
• Strong leadership skills and ability to mobilize and influence teams, both internal and external that are not in direct reporting line.
• Conduct security assessment of Cloud deployment projects, to ensure security gaps are identified and recommend remediation actions.
• Engage with Citi IS teams to understand IS guidelines for internal and public Cloud usage/adoption
• Work with SaaS vendors to assess the security guardrails for secure deployment of applications in private and public Cloud
• Plan the resolution of any identified vulnerabilities/issues during Citi onboarding, yearly compliance by tracking them towards closure.
• Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions
• Act as subject matter expert on Application Information Security, Architecture best practices across BCMA tech and IS partner forums

• Streamlines the Technology support, adoption of the SaaS/PaaS platform.

Here is what you bring -

• 12+ years of experience in Information Security domain, with at least 5+ years of experience as application security consultant / security architect, with focus on assessing secure deployment of SaaS applications
• 4-6 years of Software development experience must have.
• 4-6 year of Technology Architect experience must have.
• 2-4 year of Technology Project Management must have.
• Must have SME level knowledge of security guardrails for deploying applications in SaaS and public Cloud environment.
• In depth understanding of public Cloud and application architectures and technologies
• Strong understanding of information security and risk analysis processes, including threat modeling is a huge plus
• Identify opportunities for process improvement
• Advanced knowledge of software development lifecycle, Software development experience is a plus
• Deep understanding of information security and risk analysis processes, including vulnerability tests.
• Demonstrated ability to take ownership and work with cross functional teams to manage multiple projects simultaneously under pressure
• Consistently demonstrates clear and concise written and verbal communication as well as presentation skills for interaction with Sr leaders in Technology and business.
• Proficient in interpreting and applying policies, standards and procedures
• Good interpersonal skills with a natural ability to work with various teams, ability to adapt to and work effectively with clients and co-workers with different work styles and levels of technical knowledge
• Ability to build, manage a team,
• Excellent verbal, written and interpersonal communication skills
• Ability to work independently given general guidance
• Demonstrated ability to succinctly summarize issues/communicate to senior business stakeholders

• Excellent verbal, written and interpersonal communication skills

Education:

• Bachelor’s degree or equivalent experience
• Experience and/or knowledge of financial & banking industry is a plus
• industry certification such as CISSP, CCSP, and other vendor certification are highly preferred.

------------------------------------------------------

Job Family Group:

Technology

------------------------------------------------------

Job Family:

Applications Development

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Most Relevant Skills

Please see the requirements listed above.

------------------------------------------------------

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

 

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.