Cybersecurity Technology - Embedded Risk Oversight Analyst

• facilitate Risk Control Self-Assessment (RCSA) testing i.e. Manager's Control Assessment (MCA) testing, internal reporting and follow-ups
• consolidate related metrics and reports to verify and address any cases against risk thresholds
• initiate Corrective Action Plans (CAPs) as needed, then support the related ancillary CISO teams in remediation efforts
• respond to email requests, participate in conference calls, perform evidence review and gathering
• maintain process documentation and ensure consistent accuracy
• collect weekly metrics on related controls to update PowerPoint presentation decks that are provided to CSEA Risk & Control's senior leadership
• ensure consistent adherence to Citi's compliance policies and procedures in a timely manner
• assist in driving process improvements and standardization across the various Cyber Security Engineering and Architecture departments
• provide additional metrics and reporting support as needed

• 4+ years' experience working in or around Information Security (IS) with 2+ years' experience working directly on technology risk oversight coordination and administration
• must have knowledge and hands-on expertise in IT control functions, IS policies and standards, and the Information Security domain in general
• must be able to work collaboratively with highly-technical cybersecurity engineers, architects and business partners providing compliance guidance and support
• excellent written and verbal communication skills
• advanced proficiency with Microsoft/O365 tools like SharePoint, PowerPoint, Excel, Word

certifications such as CISSP, CISA, CRISC, ITIL

• medical, dental & vision coverage
• 401(k)
• life, accident, and disability insurance
• wellness programs
• paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays