Citi

Citi’s Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. We manage information security as an end-to-end program – one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.

The Infrastructure Information Security Review Process (I-ISRP) Team sits in CISO and is responsible for executing the information security (IS) assessments of infrastructure products. This will ensure appropriate risk treatment while reducing the number of vulnerabilities in Citi’s production environment, in compliance with Citi, legal, regulatory and other applicable policies, standards and technical requirements.

The I-ISRP Senior Manager role is a dynamic and forward-looking lead position responsible for the end-to-end operation, ensuring that the work progresses in a timely manner. The successful candidate will also take the lead in process optimization, identifying opportunities for automation and working with stakeholders on enhancement initiatives.

Your responsibilities will be:

• Act as first escalation point for all operational and technical issues related to infrastructure information security reviews (ISRs).
• Manage the ISR workload by coordinating the distribution of incoming review requests among team reviewers. Work on ISRs as required.
• Ensure ISR requests are executed in a timely manner with due care and process controls are adhered to.
• Perform quality assurance/peer review on completed reviews before the assessment report is released.
• Lead and mentor a team of reviewers.
• Monitor and track the team’s key performance indicators (KPIs).
• Support audit requests and review of security controls.
• Drive risk reduction efforts through self-identification of compliance gaps.
• Provide recommendations and assistance to engineering teams on the security assessment of their infrastructure products. Support the engineers’ efforts in remediating non-compliant items.
• Monitor changes in Citi IS standards and partner with the governance team to ensure that IS controls are updated accordingly.
• Work with technology partners on tools and systems used in security reviews. Identify new technologies to enhance the overall review process.
• Maintain internal knowledge base, ensuring it has the necessary guidance in performing the IS assessment and that the information is kept current.

Qualifications we need:

• At least 5-7 years of information security experience
• Demonstrated success in leading a global team with hands-on approach
• At least one of the following professional certifications: CISM, CISSP or CISA , additional technical certifications preferred
• Fluency in English
• Demonstrated ability to develop and implement strategy and process improvement initiatives
• Proven influencing and stakeholder management skills
• Strong analytical skills
• Proactive and self-motivated

Education:

• Bachelor’s degree/University degree or equivalent experience

What we can offer you:

By joining Citi Hungary, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive compensation package and enjoy a whole host of additional benefits that support you (and your family) to be well, live well and save well:

• Cafeteria Program
• Home Office Allowance (for colleagues working in hybrid work models)
• Paid Parental Leave Program (maternity and paternity leave)
• Private Medical Care Program and onsite medical rooms at our offices
• Pension Plan Contribution to voluntary pension fund
• Group Life Insurance
• Employee Assistance Program
• Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
• Flexible work arrangements to support you in managing work - life balance
• Career progression opportunities across geographies and business lines
• Socially active employee communities with diverse networking opportunities

Alongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self every day. We want the best talent around the world to be energized to join us, motivated to stay, and empowered to thrive.

Sounds like Citi has everything you need? Then apply to discover the true extent of your capabilities.

Job Family Group:

Technology

Job Family:

Information Security

Time Type:

Full time

Most Relevant Skills

Please see the requirements listed above.

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.