Cyber Governance Review and Control Lead Analyst, Citi

Citi

Location:
Singapore, Singapore

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Not provided

Save Job

Apply Position

Job Description:

Citi Information Security Office (CISO) Information Security Risk & Compliance Manager candidate will work with their staff to support the APAC Citi Information Security Office group, helping the team the associated risks for the CISO processes, domains, and product. While the support will be focused on the APAC group, this position will help influence global CISO Risk and Compliance processes through designing, implementing, and monitoring of risk and control framework.

Job Responsibility:

Managing and supporting multiple risk and control programs for the organization
Working with global CISO Risk team to define strategy, approach, processes, quality, tools and reporting
Ensuring emerging risks are socialized with key stakeholders and mitigation strategies are in place
Identifying areas of engagement based on level of investment, inherent risk, complexity of change
Executing Risk Control coverage strategy
Providing supervision of Risk Control team's efforts
Identifying and assigning key metrics (e.g. KRI/KPIs) to support effective monitoring and management of operational risk
Providing strong oversight of CAP (Corrective Action Plan) remediation activities
Supporting assigned technology platform during internal and external audits
Driving Manager's Control Assessment monitoring, quarterly approvals and improvements
Assessing risk when business decisions are made
Driving compliance with applicable laws, rules and regulations

Requirements:

10+ years' experience in Risk and compliance experience
Demonstrable Information Security Risk knowledge based on working in real-world environments & situations
Strong understanding of APAC Regulatory requirements e.g. MAS Regulatory requirements for Financial Institutes like MAS644, MAS655 etc, RBI, SEBI, APRA, HKMA, Bank Negara etc
Excellent communication skills required in order to negotiate internally, often at a senior level
Full management responsibility of a team or multiple teams
Bachelor's/University degree or equivalent experience, potentially Master's degree
Relevant professional qualifications with Risk / Security management e.g. CISM, CISA, CISSP or equivalent

What we offer:

Opportunity to widen knowledge of technology risk area in global financial services organization
Long-term career path across geographies and business lines
Friendly work atmosphere
Competitive compensation package
Flexible work arrangements

Additional Information:

Job Posted:
September 09, 2025

Employment Type:

Fulltime

Work Type:

On-site work

View All Jobs In This Company

Job Link Share:

Cyber Governance Review and Control Lead Analyst