Overviewthe information security operations (iso) sr manager is a senior management level position responsible for accomplishing results through the management of a team or department in an effort to prevent, monitor and respond to information/data breaches and cyber-attacks.
the overall objective of this role is to ensure the execution of information security directives and activities in alignment with citi's data security policy.responsibilitiessupport the implementation of information security (is) training plan, by verifying training participants completed the training and understand is requirementscoordinate with cross-functional operations and technology (o&t) counterparts and teams to improve o&t risk oversightattend and participate in internal/external is forums and risk committees when necessary and provide is updates to the businessensure stakeholders are held accountable for is controls, and understand responsibilities in risk mitigation and remediationimprove processes, remove is deficiencies and enhance current tools that reduce an overall risk profileensure security practices and standards compliance to reduce the likelihood of audit, regulatory and legal liabilities and reduce security risks by enhancing controls and minimizing weaknesses in citi's applications portfolioensure non-compliant items are addressed through coordination with business manager and business staffsupport the global information security (gis) policies, standards, and initiatives development and implementationprovide guidance on is aspects of projects in support of business initiativesestablish communication channels with cross-sector isos to efficiently tackle security issues that span multiple businessesmanage project deadlines, deliverables, planning, budgeting and policy formulation for the team, including short-term resource planningaproperly assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards.qualifications6-10 years of relevant experienceknowledge of scripting and programming languages preferreddemonstrated ability to interpret and apply information security policies, standards and proceduresconsistently demonstrates clear and concise written and verbal communicationproven influencing and relationship management skillsproven analytical skillseducationbachelor's degree/university degree or equivalent experiencemaster's degree preferredthis job description provides a high-level review of the types of work performed.
other job-related duties may be assigned as required.main requirementsenglish advanced domain, fluently speaking and writingcommunication skills to explain security controls required for the solutions in a clear and concise manner to non-technology stakeholdersproject coordination, tracking end to end to all the approval and presentation processcorrect comprehension of technical and business requirements of the solutions to be explained in is global committeesproven experience in issue & risk managementon time results focusedinformation security or cybersecurity certifications preferreddeep knowledge and proven experience incloud securitynetwork securitysoftware developmentsecurity operationsidentity and access managementcommand sequence language (code writing in python and powershell)operation systems (windows, linux, mac, ios, android, etc.)risk identificationissue and risk managementsecurity assessmentscybersecurity industry policiesability todesign organization security architectureidentify potential vulnerabilities and risksdefine security policiesselect appropriate security technologiesassess security risks and determine how to minimize themsupervise the correct implementation of cybersecurity solutionstrain employees on security best practices and how to identify potential threats------------------------------------------------------job family group: technology------------------------------------------------------job family: information security------------------------------------------------------time type: full time------------------------------------------------------most relevant skillsplease see the requirements listed above.
------------------------------------------------------other relevant skillsfor complementary skills, please see above and/or contact the recruiter.citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.
if you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review accessibility at citi.
view citi's eeo policy statement and the know your rights poster.
#j-18808-ljbffr