The successful candidate will demonstrate technical training and experience, especially regarding application architecture and infrastructure across various channels, as well as a good understanding of Information Security practices and method related to data privacy/classifications, authentication, biometrics and various data protection methods. Candidate should have a strong track record of developing strong business relationships, with strong presentation and communication skills to converse and breakdown an application into its core functionalities and processes. The individual should be detailed oriented, with excellent follow-up skills. This role reports to the Global Program Owner, and is expected to interface across the entire Citi IT environment (including development, infrastructure/engineering, and risk management).
Role/Responsibilities :
• Support Federal Financial Institutions Examinations Council (FFIEC) compliance projects as required including managing projects, interacting with application managers, ISOs and LOBs to communicate requirements, perform application risk assessments and track compliance.
• Work in a cross-functional role to communicate status, track issues and provide ASM reporting.
• Drive application security assessments by analyzing the current application architecture to determine the nature of risk and requirements for onboarding authentication tools.
• Based on the assessment advice the application team on the controls necessary to achieve compliance.
• As SME provide input for resolution of technical issues during authentication assessment and onboarding of in-scope applications .
• R esponsible for audit related deliverables and work towards governing the Standards and Process documents.
• Possess knowledge of cloud-based architecture to do security assessments for the applications based on Cloud.
• Needs to be well versed with various authentication methods used in the financial industry and can adapt to the evolving technologies of authentication.
• Coordinate with various teams t o be clarif y or review for additional clarification or updated status;
• Enforce program policies on scoping parameters, testing requirements and remediation timeframes.
• Improve data quality end-to-end within the ASM process by identifying and spearheading areas of improvement (i.e. automation opportunities, documentation requirements, consolidating inventories).
• Prioritize program deliverables and manage day-to-day team workflow.
• Select and tailor approaches, methods and tools to support the program and related sub-projects.
• Work on Monthly Metrics, Reports for Senior Management ,Prepare slides/MIS for the Committee reviews as well as for audit or regulatory reviews;
• Knowledge of Archer - Extensive use to manage status of compliance, actions, deliverables and to manager the queue for follow-up tasks;
• Other ad-hoc projects as needed.
Qualifications :
• Bachelor's degree (in Computer Technology or related field). or equivalent work experience
• 6+ years of experience in IT Risk Management/Information Security especially performing IT risk assessments for web applications/infrastructure
• 3+ years of experience in IT Program and Security Management
• 2+ years of experience in management reporting and metrics
• Understanding of Software Development Lifecycle (SDLC) including Agile Methodology and Cloud sourcing
• Understanding of FFIEC (Authentication in an Internet Banking Environment) guideline
• Financial services experience is strongly preferred; including familiarity with FFIEC guidelines (Authentication in an Internet Banking Environment)
• Strong MS Excel and PowerPoint skills.
• Financial services experience strongly preferred
• Certification preferred e.g. CISSP, CISM, CISA
• Knowledge in API’s/Micro Services preferred
• Experience in the use of Archer skills preferred
• Bilingual in Spanish preferred
• A confident, dynamic individual capable of defining, building, and matrix managing a global program across technology and business organizations in a constantly evolving global enterprise.
-------------------------------------------------
Job Family Group:
Technology
-------------------------------------------------
Job Family:
Systems & Engineering
------------------------------------------------------
Time Type:
Full time
------------------------------------------------------
Citi is an equal opportunity and affirmative action employer.
Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi .
View the " EEO is the Law " poster. View the EEO is the Law Supplement .
View the EEO Policy Statement .
View the Pay Transparency Posting
Job Type: Full time