Cybersecurity Manager Control Assessment (MCA) Analyst, AVP

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.

Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

About Our Team:

The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients', our revenue, our employees and our proprietary data. We manage information security as one end-to end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.

CISO Governance, Control, and Policy is responsible for providing governance, oversight, risk management, and strategic planning for CISO; as well as Third Party Information Security Assessments (TPISA). The team is also responsible for CISO Program and Performance Management including oversight of CISO’s book of work, maintaining a CISO strategy aligned with industry and regulatory requirements, and CISO’s performance management processes to ensure key IS metrics are in place to determine compliance with Citi’s standards. In addition, the team is responsible for the governance and oversight of Risk Management programs across CISO.

CISO MCA, Regulatory Management, Controls, and Quality Assurance is responsible for Cyber MCA Governance and CISO MCA Transformation, Cyber CoB, TPM Governance, and Records Management, Cyber Quality Assurance services for Third Party Information Security Assessments, Information Security Risk Assessments, Vulnerability and Threat Management programs. Additionally, the team supports Cyber Regulation Management which involves managing new and updated regulations through conducting thorough impact assessments and ensuring closure of action plans.

This role will report to the Cybersecurity MCA Manager, responsible for programs and activities related to Citi’s Transformation for the Manager’s Control Assessment (MCA) and implementation of the future state MCA for CISO organization. This role will be dedicated on transformation efforts and high-quality implementation as well as support execution of current MCA business-as-usual (BAU) activities and implement a sustainable program that can cater to CISO/Cyber’s needs.

Responsibilities:

• Manage the planning, coordination, and execution of MCA Transformation program for CISO
• Help lead efforts on creating global process profiles for CISO processes
• Gain deep knowledge of MCA Standard, Process and tools to support future state MCA.
• Support CISO Process and Control owners in their responsibilities related to MCA execution.
• Identify and document key controls necessary for mitigation of cybersecurity risk.
• Be a hands-on Subject Matter Expert (SME) with the ability to drive problem solving and root cause analyses, simplify complex messages and summarize key points
• Foster constructive dialogue and facilitate open discussion, sharing of knowledge and experience with customers and stakeholders
• Actively manage relationships with CISO business partners and risk management teams to achieve sustained success
• Educate and train people at all levels on how to apply basic tools and methodologies to achieve improvement objectives
• Establish relationships that balance short-term gains with long-term considerations

Qualifications:

• 5+ years of experience in Manager’s Control Assessment, Operational Risk, Information Security, Cybersecurity, Risk Management, Governance, Risk and Control (GRC)
• Risk Management, and/or Project Management certifications are a plus (e.g. CRISC, CISA, CISM, CISSP, PMP)

Critical Competencies:

• Bring creative approaches to help us drive value for clients
• Ability to influence decisions with senior leadership and business partners when confronted with differing opinions on information security risks
• Demonstrate clear and concise written and verbal communication
• Strong work ethic, ability to work under pressure, meet challenging deadlines
• Proven analytical skills
• Proficiency with Microsoft Office, advanced Excel skills (e.g. macros, pivots, complex formulas)
• Familiarity with data visualization/analytics business applications such as Tableau, QlikView, and Microsoft Power BI
• Familiarity with Machine Learning and Artificial Intelligence (AI) is a plus

------------------------------------------------------

Job Family Group:

------------------------------------------------------

Job Family:

------------------------------------------------------

Time Type:

------------------------------------------------------

Primary Location:

------------------------------------------------------

Primary Location Full Time Salary Range:

In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.

------------------------------------------------------

Anticipated Posting Close Date:

------------------------------------------------------

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the "EEO is the Law" poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting