Information Security Technology Senior Specialist

The Infrastructure Information Security Review Process (I-ISRP) Team sits in CISO and is responsible for executing the information security (IS) assessments of infrastructure products. This will ensure appropriate risk treatment while reducing the number of vulnerabilities in Citi’s production environment, in compliance with Citi, legal, regulatory and other applicable policies, standards and technical requirements.

The Information Security Technology Senior Specialist is responsible for leading efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.
Responsibilities:

• Perform the information security review of infrastructure products and verify their compliance to the Citi Information Security Standards (CISS). Take ownership of the IS certification of certain products and solutions, advising clients and making security decisions on products and solutions to be released into Citi production environment.
• Evaluate the security and compliance of the products by reviewing documentation and by hands-on testing. Document any findings, security breaches and non-compliant items.
• Assess risks of identified gaps, advise clients and partners on the feasibility of addressing them. Presenting results of an IS review, defending key points towards even senior clients, while remaining helpful, flexible and open to good solutions.
• Execute strict quality control measures into all processes to consistently meet standards.
• Generate metrics and ensure productivity to guarantee Service Level Agreements (SLAs) and client expectations are met.
• Support Technical Information Security Officers in their work for remediating any non-compliant items.
• Embracing new technologies, actively seeking out opportunities for improving efficiency of the Information Security Review Process and seek out possibilities for implementing automation for any manual efforts.
• Ensure essential procedures are followed, define operating standards and processes and develop procedures and process control manuals.
• Perform information security awareness and training activities.
• Coordinate any major initiatives in the team overarching multiple product reviews or affecting major process changes.
• Provide informal guidance or on-the-job-training to new team members.

Qualifications:

• 5-7 years working in an Information Technology related field.
• At least 2 years of experience in an Information Security field.
• Degree in a technology related discipline is strongly preferred.

• CISSP, CISA, CISM or equivalent exam, or commitment to obtain it in the near future.

• Experience with Unix-based systems.
• Knowledge of computer networking concepts.
• Familiarity with cloud-based technologies.
• Consistently demonstrates clear and concise written and verbal communication.
• Proven analytical skills.
• Ability to work and make decisions independently.
• Fluent in English.

------------------------------------------------------

------------------------------------------------------

------------------------------------------------------

------------------------------------------------------

------------------------------------------------------

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.
View Citi’s EEO Policy Statement and the Know Your Rights poster.