• Assist in the global and end to end management of the ICG Vulnerability Assessment (VA) Program to program goals, deliverables, milestones and to a no “surprise” culture.
• Help the business-embedded ISOs and Application Managers to manage and track VA Findings in compliance with Citi’s Policies and Standards.
• Assist in the management of the VA Program to defined Metrics & Reporting Thresholds.
• Act as the liaison between the Application Managers/Control Teams and the Citi Technology infrastructure (CTI) VA Team to resolve any identified issues.
• Help to ensure that critical IT risk issues are communicated to and reviewed by appropriate levels of management.
• Assist with the delivery of key IT Risk Management program deliverables whether deemed a fire drill or Business As Usual (BAU).
• Help to ensure that critical IT control processes conform to standards and provide appropriate reporting.
• Assist in monitoring applicability and changes to internal policies and adjust approach as required. This may entail adjusting existing reports, creating new reports, and changing approach in dealing with end users.
• Provide guidance and coordination with other corporate groups around approaches, solutions and best practices in governance, information risk management, program development and security compliance.
• Help to measure and report on the effectiveness and efficiency of IT Risk Management activities to management.
• Liaise, consult and help in providing leadership to the business with technical security issues, standards, program development, security training/awareness and information protection best practices.
• Assist in ensuring alignment of IT security architecture, policies, procedures and standards with the corporate risk profile.
• Assist in the development of a reporting framework and process, citing results and establishing recommendations and timelines to improve overall IT security within ICG.
• Assist in the development of a framework and process responsible for assessing information risks and creating corresponding mitigation plans.
• Help to monitor applicability and changes to internal and external regulations affecting technology, information protection and risk.
• Help to ensure communication of key Information Security strategies and plans to the ICG organization.
Experienced Required
• Capable of working with both technology and business contacts in a constantly evolving environment.
• Good Technical Skills.
• Ability to remain calm under pressure when faced with difficult or urgent issues and competing priorities.
• Undergraduate degree required.
• Microsoft Office skills required.
• CISSP and/or CISM a plus.
• Information Security and Program Management delivery experience.
• Experience in the banking industry.
• Good communication skills, both orally and written.
• Good organization skills.
• Ability to work with development organizations to develop solutions to security issues.
• Good analytical and problem solving skills with the ability to present data in a format that facilitates senior management decision making.
• Good time management skills with the ability to remain calm under pressure and meet deadlines.
• Ability to multi-task and work independently with a virtual team against tight timelines.
• Comfortable working as part of global team across multiple countries, cultures and time-zones
• Passionate about information security and should welcome a challenge.
• Focused on considering business enablement while reaching balanced information risk judgments.
• Adept at presenting mathematical and numerical data in a format that facilitates senior management decision making.
• Good time management skills.
• Self-motivated and demonstrate high level of drive, energy and initiative.
• Customer-oriented, resourceful and enthusiastic.
Qualifications
• At least 1-2 years’ experience preferably in a Big Four or similar consulting firm with experience in both project/program management and information security.
• Undergraduate degree required.
• Microsoft Office skills required.
• CISSP and/or CISM preferred.
• Excellent communication, interpersonal and presentation skills to technical and business audiences in a constantly evolving environment.
• Passionate about information security and should welcome a challenge.
• Focused on considering business enablement while reaching balanced information risk judgments.
• Analytical and problem solving skills with the ability to present data in a format that facilitates senior management decision making.
• Adept at multitasking and time management with the ability to remain calm under pressure and meet deadlines.
• Ability to work independently with a virtual team to define and complete tasks on time.
• Technical skills a plus.
-------------------------------------------------
Job Family Group:
Project and Program Management
-------------------------------------------------
Job Family:
Program Management
------------------------------------------------------
Time Type:
Full time
------------------------------------------------------
Citi is an equal opportunity and affirmative action employer.
Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi .
View the " EEO is the Law " poster. View the EEO is the Law Supplement .
View the EEO Policy Statement .
View the Pay Transparency Posting
Job Type: Full time