Who ❤️ PJ →

Full Search

This job listing has expired and may no longer be relevant!
11 May 2021

Full-Time Technology Information Security Officer/Security Architect 20241956

Citi – Posted by ccorrale97 Anywhere

Job Description

The ICG Technology Information Security Team is responsible for managing application security risks and providing necessary support to Operations and Technology teams. The Technology Information Security Officer plays a key role in ensuring compliance with Citi’s Information Security standards and policies. The ICG Technology development unit is global organization with major presence in North America, EMEA and ASPAC region.

A Senior Security Analyst will support Institutional Client Group business with primary responsibilities to perform application information security risk assessments and manage Information security operations to ensure business applications comply with Citi Information Security standards and Regulatory needs.

Responsibilities:

  • Perform information security risk assessments on  business applications throughout development lifecycle for SDLC/Agile/Iterative lifecycles
  • Report  Information security issues to IT with appropriate recommendations to mitigate and/or remediate the risk as well as assist IT with corrective action plans
  • Provide subject matter expertise in application development lifecycle to assess security requirements and controls and ensure that security controls are implemented as planned.
  • Promote awareness of current information security policies and standards
  • Identify opportunities to automate and standardize information security controls and for the supported groups
  • Resolve any vulnerabilities or issues detected in an application or infrastructure
  • Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions
  • Direct the development and delivery of secure solutions by coordinating with business and technical contacts
  • Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm’s reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.
  • Interface with Internal auditor and/or provide support during audits
  • Establish and maintain relationships with domain architects, project managers, and others within the technology development unit.

Qualifications:

  • 7+ years of Information Security assessment experience in areas of Application Security and IT Information Security.
  • Good understanding of Information security control areas such as  Authentication/ Authorization/Access Control, Entitlement, Cryptography for applications (including web applications, mobile technology, cloud) is a must.
  • Good understanding/experience of global Payment, Clearing and Financial Messaging platforms/concepts including Swift, Fedwire, CHIPS and other local RTGS/ACH is a must.
  • Good understanding of IT Security frameworks such as NIST SP800, ISO 27001 is required.
  • Good knowledge of software development processes (SLDC/Agile/Iterative) and integration of security assessments in SDLC process, application and infrastructure vulnerability management is required is required
  • IS/IT program/project management and development experience is a plus
  • Exhibit strong influencing / negotiation skills, attention to details are key, ability to multi task and written/verbal communication skills.
  • Strong problem solving/analytical skills
  • Proficient in MS Office products, particularly PowerPoint & Excel.

Education:

  • Bachelor’s degree/University degree or equivalent experience
  • Master’s degree preferred
  • Professional certifications, such as CISSP/CISM/CISA/CSSLP, or willingness to obtain certification within 12 months of start date.

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

————————————————-

Job Family Group:

Technology

————————————————-

Job Family:

Information Security

——————————————————

Time Type:

Full time

——————————————————

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries (“Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the “EEO is the Law” poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting

Share this role online (there may be a referral fee*)

How to Apply

https://jobs.citi.com/job/tampa/technology-information-security-officer-security-architect/287/7052299120

Job Types: Full-Time.

546 total views, 0 today

Apply for this Job