The Information Security Operations (ISO) Sr Manager is a senior management level position responsible for accomplishing results through the management of a team or department in an effort to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.
Responsibilities:
- Support the implementation of Information Security (IS) Training Plan, by verifying training participants completed the training and understand IS requirements
- Coordinate with cross-functional Operations and Technology (O&T) counterparts and teams to improve O&T risk oversight
- Attend and participate in internal/external IS forums and risk committees when necessary and provide IS updates to the business
- Ensure stakeholders are held accountable for IS controls, and understand responsibilities in risk mitigation and remediation
- Improve processes, remove IS deficiencies and enhance current tools that reduce an overall risk profile
- Ensure security practices and standards compliance to reduce the likelihood of audit, regulatory and legal liabilities and reduce security risks by enhancing controls and minimizing weaknesses in Citi’s applications portfolio
- Ensure non-compliant items are addressed through coordination with Business Manager and business staff
- Support the Global Information Security (GIS) policies, standards, and initiatives development and implementation
- Provide guidance on IS aspects of projects in support of business initiatives
- Establish communication channels with cross-sector ISOs to efficiently tackle security issues that span multiple businesses
- Manage project deadlines, deliverables, planning, budgeting and policy formulation for the team, including short-term resource planning
- Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards.
Qualifications:
- 6-10 years of relevant experience
- Knowledge of Scripting and Programming Languages preferred
- Demonstrated ability to interpret and apply information security policies, standards and procedures
- Consistently demonstrates clear and concise written and verbal communication
- Proven influencing and relationship management skills
- Proven analytical skills
Education:
- Bachelor’s degree/University degree or equivalent experience
- Master’s degree preferred
This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.
- Indispensable conocimiento de Regulación de Sistemas de Pagos Banco de México -BANXICO- (13/2017): SPEI (14/2017) / SPID (4/2016) / BDT (Reglas Conjuntas BANXICO-CNBV-SHCP) / SIBUC (9/2023)
- Deseables certificaciones relevantes en Information Security: CISM, CRISC, CISA, CISSP
- Conocimiento medio de controles Information Security y Cybersecurity (ISO 27002, ISO 27032, NIST)
- Habilidades de identificación y gestión de riesgos de Information Security y Cybersecurity
- Soft skills: Liderazgo, Trabajo en Equipo / Colaboración, Escucha Activa
- Inglés fluido
- Indispensable Titulo Universitario.
------------------------------------------------------
Job Family Group:
Technology
------------------------------------------------------
Job Family:
Information Security
------------------------------------------------------
Time Type:
Full time
------------------------------------------------------
Citi is an equal opportunity and affirmative action employer.
Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.
View the "EEO is the Law" poster. View the EEO is the Law Supplement.
View the EEO Policy Statement.
View the Pay Transparency Posting
Top Skills
What We Do
Citi's mission is to serve as a trusted partner to our clients by responsibly providing financial services that enable growth and economic progress. Our core activities are safeguarding assets, lending money, making payments and accessing the capital markets on behalf of our clients. We have 200 years of experience helping our clients meet the world's toughest challenges and embrace its greatest opportunities. We are Citi, the global bank – an institution connecting millions of people across hundreds of countries and cities.