CrawlJobs Logo

Cyber and Information Security Risk Manager, Senior Vice President

https://www.citi.com/ Logo

Citi

Location Icon

Location:
United Kingdom , Belfast

Category Icon

Job Type Icon

Contract Type:
Not provided

Salary Icon

Salary:

Not provided

Job Description:

This role is critical for safeguarding the bank's financial stability and sustained growth by expertly managing Cyber & Information Security risks. The position involves identifying, assessing, measuring, monitoring, and reporting on these risks, ensuring all operations align with the Markets defined risk appetite. This professional provides a comprehensive view of the cyber threat landscape, enabling proactive anticipation, assessment, and mitigation of potential security risks across the Markets Business.

Job Responsibility:

  • Proactively identify and assess evolving Cyber & Information Security risks across the business and technology landscape
  • Design and lead strategic initiatives to enhance cyber and information security controls and processes, ensuring alignment with risk appetite
  • Collaborate effectively with business unit leaders and diverse stakeholders to embed robust cyber risk management practices into business operations
  • Partner with 2nd line functions (e.g., Information Security Compliance, Operational Risk Management) to interpret and apply cyber risk requirements and policies accurately
  • Engage with 3rd line functions (e.g., Internal Audit, Compliance Assurance) to facilitate independent assessments, address findings, and drive resolution of cyber and information security issues
  • Maintain comprehensive oversight of cyber risk posture through continuous monitoring of metrics, activity, and corrective action plan execution
  • Prepare and present clear, concise updates on emerging cyber risks, control effectiveness, and strategic enhancements to senior management and governance committees
  • Ensure rigorous adherence to information security policies and regulatory requirements, including maintaining a robust Manager’s Control Assessment (MCA) for Cyber & Information Security
  • Serve as a primary liaison for all internal and external audit engagements related to Cyber & Information Security
  • Lead and mentor a team focused on cyber risk assessment, regulatory compliance, and efficient reporting and resolution of security-related matters

Requirements:

  • 10+ years of progressive experience in Cyber & Information Security Risk Management, IT Risk, Security Compliance, or IT Audit, with significant experience in a financial services environment
  • Demonstrated expertise in identifying, assessing, measuring, monitoring, and reporting on complex cyber and information security risks
  • Proven track record of designing and leading initiatives to enhance security controls and processes
  • Extensive experience collaborating with and managing expectations of diverse stakeholders, including business unit leaders, technical teams, and 2nd and 3rd line functions (e.g., Information Security Compliance, Operational Risk, Internal Audit, Regulators)
  • Strong understanding of evolving cyber threat landscapes, regulatory requirements (e.g., NIST, ISO 27001, GLBA), and industry best practices
  • Proficient in maintaining risk and control frameworks, including Manager’s Control Assessment (MCA), specifically for Cyber & Information Security risks
  • Exceptional communication and presentation skills, with the ability to articulate complex cyber risk concepts and their business impact to senior management and governance committees
  • Ability to act as a primary liaison for all audit and regulatory engagements pertaining to Cyber & Information Security
  • Strong leadership capabilities with experience in leading and mentoring risk management professionals
  • Bachelor's degree required
  • Master's degree or relevant professional certifications (e.g., CISSP, CISM, CRISC) preferred
What we offer:
  • Generous holiday allowance starting at 27 days plus bank holidays
  • increasing with tenure
  • A discretional annual performance related bonus
  • Private medical insurance packages to suit your personal circumstances
  • Employee Assistance Program
  • Pension Plan
  • Paid Parental Leave
  • Special discounts for employees, family, and friends
  • Access to an array of learning and development resources

Additional Information:

Job Posted:
March 19, 2026

Employment Type:
Fulltime
Work Type:
Hybrid work
Job Link Share:

Looking for more opportunities? Search for other job offers that match your skills and interests.

Briefcase Icon

Similar Jobs for Cyber and Information Security Risk Manager, Senior Vice President

Assistant Vice President – Third Party Risk Oversight specialist - TPRO - Consumer Credit Risk

The AVP – Third party risk oversight role is responsible for owning and enhancin...
Location
Location
India , Mumbai
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 8+ years of experience in Risk management, third-party risk, vendor risk/management or credit risk with a large financial institution
  • US banking regulatory expectations
  • Prior experience operating with consumer credit risk or closely related risk domains
  • Extensive background in managing critical suppliers and regulated third-party relationships
  • Experience active as a risk/process oversight owner or leading risk platforms, frameworks, or governance models
  • Bachelor’s degree in related fields
  • Working knowledge of Vendor relationship management / Vendor risk management/ TPRO
  • Growth mindset with ability to balance risk, compliance and business enablement
  • Excellent stakeholder management and executive communication skills
  • Ability to challenge vendors and internal partners constructively
Job Responsibility
Job Responsibility
  • Product ownership and strategy: Own the end-to-end product vision for third-party risk oversight tools, processes, and controls within consumer credit risk
  • Own the TPRO vision, roadmap, and backlog, ensuring alignment with Citi risk policies and enterprise standards
  • Translate regulatory guidance, Citi policies, and risk requirements into User stories, controls, and functional requirements into scalable risk oversight solutions
  • Prioritize initiatives based on risk severity, regulatory commitments and business impact
  • Third-party Risk oversight: Oversee risk assessment lifecycle for third-party vendors, including: Inherent risk assessments, Due diligence (financial, operations, cyber, data privacy, model risk), Ongoing monitoring and periodic reviews
  • Ensure critical and high- risk vendors undergo enhanced oversight and governance
  • Maintain a risk-tiered vendor inventory aligned with consumer credit risk exposure
  • Supplier and contract management: Ensure supplier contracts meet regulatory, risk and control standard, including: SLAs, KPI, audit and access rights, data protection, information security, confidentiality, BCP/DR (business continuity planning/ Disaster recover), subcontractor and fourth-party controls
  • Track contract milestones, renewals, terminations and renegotiations
  • Proactively identify contracts nearing expirations and drive timely renewals or exit strategies
  • Fulltime
Read More
Arrow Right

Vice President, ISO Lead Analyst, Technology

The Information Security Operations (ISO) Lead Analyst is a senior level profess...
Location
Location
Japan , Chiyoda, Tokyo
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 6-10 years of relevant experience
  • Proficient in interpreting and applying policies, standards and procedures
  • Consistently demonstrates clear and concise written and verbal communication both in English and Japanese
  • Proven influencing and relationship management skills
  • Proven analytical skills
  • Bachelor’s degree/University degree or equivalent experience
  • Professional certifications such as CISSP, CISM, CCSP, CISA, etc. preferred
  • Business-level English proficiency for communicating with global peers
  • Communicate proficiently in Japanese with regulatory and law enforcement authorities, local businesses, and vendors
Job Responsibility
Job Responsibility
  • Support the implementation of the IS Training Plan, by verifying training participants completed the training and understand IS requirements
  • Coordinate with cross-functional Operations and Technology (O&T) counterparts and teams to improve O&T risk oversight
  • Provide recommendations on IS aspects of projects and assess/report Corrective Action Plans to improve IS programs and initiatives
  • Escalate significant risks to the Regional/Sector IS Leadership for information or required actions
  • Attend and participate in internal/external IS forums and risk committees when necessary
  • Improve processes, by removing deficiencies and enhancing current tools that reduce an overall risk profile
  • Ensure security practices/standards compliance and reduce security risks through enhancing controls and minimizing weaknesses in Citi’s applications portfolio
  • Ensure audits are passed with a satisfactory audit rating for all IS topics
  • Ensure non-compliant items are resolved through coordination with Business Manager and business staff
  • Support the Global Information Security (GIS) policies, standards, and initiatives development and implementation
  • Fulltime
Read More
Arrow Right

Vice-President, Information Technology

The Vice President, Information Technology (VP, IT) is a key executive responsib...
Location
Location
Canada , Etobicoke
Salary
Salary:
Not provided
woodbine.com Logo
Woodbine Entertainment Group
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 10–15 years of experience in IT, including 5+ years in senior leadership roles
  • Broad technology expertise across IT Operations, Support, Cyber Security, Product Management, and Data
  • Bachelor’s degree in Computer Science, Information Systems, or related field (or equivalent experience)
  • Proven experience developing and executing technology strategies aligned with business goals
  • Demonstrated success leading large teams, complex projects, and enterprise‑wide transformations
  • Strong communication, stakeholder management, and relationship‑building skills with the ability to simplify complex technical concepts
  • Experience managing technology budgets and resource planning
  • Demonstrated ability to drive innovation while maintaining operational excellence
Job Responsibility
Job Responsibility
  • Build multi‑year technology strategies for IT Operations, Support, Cyber Security, Product Management, Data & Integration
  • Identify and integrate emerging technologies
  • Represent IT strategy and performance to executive leadership
  • Lead the day‑to‑day operations of technology
  • Oversee infrastructure, network, cloud operations, and enterprise applications
  • Own and manage the technology budget
  • Establish strong governance frameworks
  • Monitor and optimize IT service delivery performance
  • Build, implement, and evolve a multi‑year Cyber Security Strategy
  • Ensure robust risk management practices
  • Fulltime
Read More
Arrow Right

Principal Analyst, Control Testing, Certification and Assurance

The newly created 1st Line Control Office function within Vocalink Limited (VLL)...
Location
Location
United Kingdom , London
Salary
Salary:
Not provided
mastercard.com Logo
Mastercard
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Strong understanding and experience of working with control frameworks and standards (e.g. ISO27001, NIST, CRI, or PCI DSS)
  • Strong understanding and experience of conducting security related audits/reviews and managing/coordinating external audits including certification audits
  • Experience of resolving varied and complex certification and assurance issues
  • Knowledge and experience of all areas of security and IT general controls across a variety of platforms and environments
  • Proven experience in control testing or assurance within security in a regulated environment
  • Strong investigative and analytical experience (e.g. enquiry, scanning, analysis, interviewing, testing), problem-solving, and decision-making skills
  • Experience collaborating cross-functionally to identify and implement good practice security audit management and assurance processes
  • Ability to assess control design and operating effectiveness in complex environments and to identify control gaps and improvement opportunities
  • Excellent communication and stakeholder engagement skills
  • Experience of managing and coaching junior team members
Job Responsibility
Job Responsibility
  • Lead and manage external audits for technical standards, e.g. PCI DSS and PCI PIN
  • Support the Vice President and Director of Certification and Assurance in the development and maintenance of the annual Control Testing, Certification and Assurance plan
  • Supporting and deputising for the Director of Certification and Assurance in the discharge of their responsibilities, as required
  • Provide strategic input into the evolution and continuous improvement of Certification and Assurance team processes and procedures
  • Maintain certification related documentation
  • Prepare and lead the organisation for annual certification audits
  • Lead the assessment and validation of controls and processes against a variety of security standards and obligations
  • Lead the team on the management of certifications, (e.g., ISO27001, PCI DSS) and assurance activities (e.g., ISAE3000)
  • Conduct periodic testing of key and non-key controls in line with the Control Testing Methodology
  • Evaluate compliance with internal policies, standards, regulatory requirements, and customer obligations
  • Fulltime
Read More
Arrow Right
New

Vice President, Information Technology

Phillip Jeffries is looking for a leader to join our IT Team! We are seeking a V...
Location
Location
United States , Fairfield
Salary
Salary:
200000.00 - 215000.00 USD / Year
phillipjeffries.com Logo
Phillip Jeffries Ltd
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Must be based in New Jersey (or able to work on-site 4 days per week at our Fairfield, NJ headquarters)
  • 10+ years of progressive leadership experience in enterprise technology within a global organization
  • Demonstrated ownership of technology investment portfolios, including budget accountability, prioritization, and ROI realization
  • Experience operating in both centralized and decentralized organizational models
  • Proven track record deploying and overseeing cybersecurity programs in a multi-site, international environment with 400+ employees
  • Hands-on leadership exposure to: Enterprise platforms such as ERP, CRM, WMS, marketing automation, and Microsoft Office
  • Custom development and system integration
  • Enterprise-level cybersecurity governance and incident readiness
  • Proven ability to operate as a strategic business partner, not simply a service provider
  • Executive presence with the ability to independently present strategy, budgets, tradeoffs, and outcomes to ownership
Job Responsibility
Job Responsibility
  • Build and evolve a high-performing global technology organization that supports a growing, international business
  • Recruit, develop, and retain strong senior leaders and high-impact individual contributors
  • Design and continuously refine team structures, roles, and career paths as the organization matures
  • Serve as a coach and mentor while staying close enough to execution to maintain credibility
  • Ensure every role within IT has a clear development plan aligned to long-term growth
  • Own and maintain a multi-year enterprise technology roadmap aligned to company growth, operational leverage, and risk posture
  • Directly control technology budgets, headcount planning, and vendor strategy
  • Shape investment decisions by initiating high-impact opportunities, rejecting low-value initiatives, and sequencing work to balance speed, capacity, and risk
  • Design governance models that support experimentation through pilots, staged funding, and clear decision gates
  • Serve as the enterprise owner of cyber risk and technology risk posture
What we offer
What we offer
  • Company bonus program
  • Annual Cost of Living Increase
  • Retirement Plan - company automatically contributes approximately 10% of your annual compensation
  • Medical Coverage – low cost to the employee ($40 per month)
  • Spouse/ Domestic Partner/ Civil Union Partner Coverage
  • Family Coverage
  • Health Reimbursement Account (HRA)
  • Prescription Plan
  • Dental and vision coverage
  • Tax advantages through Flexible Spending Accounts that allow you to pay for specific healthcare and dependent care expenses with pre-tax dollars
  • Fulltime
Read More
Arrow Right
New

Software Engineer

This position may be eligible for a $25K sign on bonus for external hires! Lockh...
Location
Location
United States , Springfield
Salary
Salary:
86100.00 - 151800.00 USD / Year
tietalent.com Logo
TieTalent
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelors degree from an accredited college in a related discipline, or equivalent experience/combined education, with 2 years of professional experience
  • or no experience required with a related Masters degree
  • Candidate must possess active security clearance with a polygraph
Job Responsibility
Job Responsibility
  • Analyze user requirements to derive software design and performance requirements
  • Debug existing software and correct defects
  • Provide recommendations for improving documentation and software development process standards
  • Design and code new software or modify existing software to add new features
  • Integrate existing software into new or modified systems or operating environments
What we offer
What we offer
  • Medical
  • Dental
  • Vision
  • Life Insurance
  • Short-Term Disability
  • Long-Term Disability
  • 401(k) match
  • Flexible Spending Accounts
  • EAP
  • Education Assistance
  • Fulltime
Read More
Arrow Right
New

ServiceNow Developer

We are seeking a skilled ServiceNow Developer to design, build and enhance Servi...
Location
Location
India , Pune
Salary
Salary:
Not provided
vodafone.com Logo
Vodafone
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Minimum 3 years’ experience as a ServiceNow Developer or Administrator
  • Strong expertise in ServiceNow integrations and Service Portal development
  • Advanced understanding of the software development lifecycle
  • Good awareness of SCDL methodologies
  • Demonstrates critical thinking and structured problem‑solving abilities
  • Experienced in team collaboration and capable of supporting or guiding colleagues
  • Strong organisational and time‑management skills
  • Effective communication and interpersonal abilities
Job Responsibility
Job Responsibility
  • Develop, configure and customise ServiceNow applications in line with business requirements
  • Deliver and optimise complex ServiceNow integrations using industry‑standard methods
  • Build and maintain Service Portal components, widgets and user interfaces
  • Apply advanced knowledge of the software development lifecycle to ensure robust and scalable outcomes
  • Utilise understanding of various SCDL methodologies to support structured delivery
  • Troubleshoot issues, analyse root causes and implement sustainable solutions
  • Collaborate effectively with stakeholders and cross‑functional teams
  • Provide guidance and leadership to team members where required
  • Manage priorities and timelines to meet project objectives
What we offer
What we offer
  • Opportunity to deepen technical expertise in ServiceNow development and integrations
  • Exposure to a wide range of enterprise-level digital transformation initiatives
  • Collaborative work environment with supportive colleagues and leaders
  • Opportunities to lead initiatives and contribute to process improvements
  • Experience in a global, fast‑evolving organisation committed to continuous innovation
Read More
Arrow Right
New

Game Economy Designer

Madbox is a fast-growing mobile gaming company with a very unique way of develop...
Location
Location
France; Spain , Paris; Barcelona
Salary
Salary:
Not provided
madbox.io Logo
Madbox
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Experience designing and balancing game systems and in-game economies, ideally in Tycoon, RPG, or 4X titles
  • Solid understanding of gameplay experience, progression, features, and special attention to detail
  • Experience in Combat Design, designing RPG fights (team battles …)
  • Experience designing and operating Live Ops systems and features
  • Good sense of live features, and the market's current state of art
  • Data-driven mindset and strong analytical skills, able to translate insights into concrete design improvements
  • Proficient with tools such as Excel, PowerPoint, and Figma, with a strong interest in leveraging AI
  • Working knowledge of Unity or similar game engines
  • Strong knowledge of mobile market trends, benchmarks, and best practices
  • Passion for mobile games
Job Responsibility
Job Responsibility
  • Design and balance engaging game levels, RPG combat, and progression features, ensuring an enjoyable and challenging player experience
  • Analyze game performance, player data, and feedback to improve game experience and KPIs
  • Create exciting content that enriches game dynamics and supports a cohesive and compelling gameplay experience
  • Participate actively in design discussions, contributing to the overall game vision and helping to shape a cohesive and compelling gameplay experience
  • Create and maintain comprehensive design documentation
  • Study market trends in live ops and economy design to inform design decisions
  • Collaborate closely with art, UX, and development teams to ensure seamless implementation of design vision
Read More
Arrow Right