Digital Forensics Investigative Group Manager- SVP

The Cyber Investigations and Digital Forensics Manager is responsible for providing strategic leadership to the North American Cyber team. This position will tap into your expertise, whether that is internal cyber investigations, network security incidents/intrusions, or internal or external fraud investigations.  You also continue to hone your skills in establishing strong partnerships, mentoring, motivating, and managing a high performing team.

This role will lead regional cyber investigators whose collective mission is to investigate information security risks or wrongdoing against our firm. We conduct professional and independent cyber investigations in order to ensure the confidentiality, integrity, and availability of Citi controlled or owned information. The cyber investigative team is responsible for executing a consistent process to identify, report, and investigate all information security, cyber, and network incidents at a global level, while isolating and addressing potential information or network security risks.

Additional responsibilities will include the following:

• Supervise cyber investigative staff and assign investigative cases from various referral sources.
• Ensure that all cyber investigative referrals are properly investigated and managed in a professional and consistent manner relative to the regional investigative standards, protocol, and aging standards.
• Provide regular feedback, guidance, and consultation to cyber investigative staff, offering direction and expertise to further an investigation.
• Conduct detailed reviews of cyber investigations reports and case management system to assess data/content quality, supporting evidence and the appropriateness of case outcomes. 
• Provide regular feedback, guidance, and consultation to cyber investigative staff, offering direction and expertise to further an investigation.
• Ensure all allegations of misconduct including code of conduct and ethics violations are properly investigated and managed in a professional and consistent manner. 
• Work with regional in-business partners to implement appropriate controls and measures to protect the company, staff, assets, systems, business operations, and intellectual property.
• Lead investigations of cyber security incidents and network intrusions and oversee timely reports of findings.
• Supervise proactive, complex, high profile, and sensitive cyber investigations with the goal of directing cases to a successful conclusion and providing timely root cause findings to business and functional partners.
• Oversee and/or lead teams gathering, recovering, analyzing, interpreting, and presenting digital information and evidence from sources such as computers, mobile devices, websites, network packets, etc.
• Lead and direct collaborative efforts to conduct analysis of log files and digital evidence.
• Establish methods for information sharing of trends and techniques, industry information, protocols, and training on investigative processes.
• Develop and maintain effective relationships with local regulatory bodies, law enforcement, intelligence agencies, financial institutions, and industry professional associations.  
• Communicate incident findings from a cyber or forensic investigation to different levels of leadership and other appropriate parties outlining recommendations to prevent and mitigate future risks and threats.
• Lead or manage a team(s) providing technical and non-technical assistance to investigative personnel on digital evidence matters using a full range of investigative tools and processes in accordance with applicable laws, policies, guidelines regulations and procedures.

Education:

• Bachelor’s degree, potentially Master’s degree and managerial experience

Knowledge Skills and Abilities Required:

• 10+ years of experience
• Carry a diverse and complex workload
• Perform critical evaluations of staff to raise operational effectiveness and efficiency
• Innovative and process driven
• Strong relationship and influencing skills
• Ability to represent the function/team on matters and brief seniors on significant cases and risks
• Ability to work with confidential information with the appropriate level of care and discretion
• Creates an environment where people hold themselves to the highest ethical standards
• Ability to brief high level management

Knowledge Skills and Abilities Preferred:

• Working knowledge of how computer applications, systems, and networks are managed and secured
• Working knowledge of cyber forensic and eDiscovery procedures to collect, handle, examine, and analyze evidentiary artifacts while preserving integrity and maintaining a strict chain of custody.
• Working knowledge of any DFIR toolset (e.g. EnCase, FTK, Sleuth Kit).
• Expresses ideas or facts in a clear, concise, and open manner.
• Communication style indicates an awareness and consideration for the needs of others.
• Actively listens and proactively shares knowledge.
• Handles conflict effectively, by overcoming differences of opinion and finding common ground.
• Evaluates data and courses of action to reach logical, pragmatic decisions.
• Takes an unbiased, rational approach with calculated risks.
• Applies innovation and creativity to problem-solving.
• Open to change and flexible in a fast paced environment.
• Performance is consistent, even under pressure.
• Pursues continuous improvements.
• Effectively adapts own approach to suit changing circumstances or requirements.
• Demonstrates understanding of the impact of own role on all partners and always puts the end beneficiary first.
• Develops and implements sustainable strategies on how to perform their role, with an eye on improvement based on changes needed or refinement of approach.
• 2nd language skills

Other Requirements:

• Domestic and International travel
• Flexibility to work on call off hours/weekends during critical project phases if necessary.

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required. 

------------------------------------------------------

Job Family Group:

------------------------------------------------------

Job Family:

------------------------------------------------------

Time Type:

------------------------------------------------------

Primary Location:

------------------------------------------------------

Primary Location Full Time Salary Range:

In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.

------------------------------------------------------

Anticipated Posting Close Date:

------------------------------------------------------

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the "EEO is the Law" poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting