This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Email Security Senior Analyst is responsible for providing expert support and leadership to email security and brand protection functions, projects, and programs. They will be responsible for interactions with vendors, employees, and stakeholders of the team’s services. The Email Security Senior Analyst will provide operational support, intelligence gathering, project and program management, analysis and report development, publishing, and briefing. Besides managing aspects of the day-to-day function of these programs, he or she will partner with various cyber and information security teams to enhance current solutions and find new solutions to stay ahead of the ever-changing cyber threat. The position will require substantial collaboration with other members of the team and across other Cyber Security Operations teams ensuring appropriate email security support and solutions are triaged appropriately.
Job Responsibility:
Provide expertise and experience to existing and future functions and projects focused on email threats and controls.
Actively monitor and research cyber threats with a direct or indirect impact to the Citi brand
Analyze and provide oversight of analysis of email threats and controls
Provide leadership, solution design, and hands-on development support for email security controls
Develop and manage processes to track identified incidents to resolution
Develop weekly, monthly, quarterly, and annual metrics and reports as needed
Develop written analytical reports and give presentations on findings
Triage information received from vendors and process that information through previously defined internal workflows
Manage third party vendors to ensure proper delivery of services
Manage meetings with internal stakeholders to address open issues and identify process improvements
Actively engage in liaison activities with intelligence communities, industry associations, peer institutions, and information sharing communities
Apply developed communication and diplomacy skills to guide and influence decision makers
Keep up to date with the ever-changing cyber security landscape to remain relevant and knowledgeable through internal and external certifications.
Requirements:
Highly technical and analytical expertise, with a proven deep background (preferred 5+ years’ IT experience in addition to cybersecurity) in technology design, implementation, and delivery.
Minimum 3+ years working in security engineering or security operations role, with a focus on email security
Strong experience with configuration, administering, troubleshooting email routing and filtering in Exchange, Exchange Online, Proofpoint and other enterprise level email security gateways (such as inbound routes, whitelists, email firewall rules, spam/AV, logging/reporting, TAP, TRAP, domain rewrites, secure messaging and recipient verification).
Experience in analyzing domain email activity and deploying SPF, DKIM and DMARC authentication
Strong understanding of and demonstrated experience with the tools and sources available to conduct email and threat analysis
Experience with enterprise phishing defense concepts and technologies
Cross-functional understanding of email operations, security practices and the user experience
Knowledge and experience creating and maintaining policies, standard operating procedures (SOPs) and technical documents
Ability to identify and develop new processes to address cross-functional and cross-business requirements and implement
Ability to manage projects and ensure tasks are being met timely. Work with leaders of Cyber Security Operations teams to track, drive and report on strategic initiatives.
Ability to organize and appropriately prioritize multiple, ongoing tasks via efficient time management and forecasting. Project management skills a plus
Ability to work independently, as well as in team situations, to help internal and external customers achieve desired results
Experience with data analysis and data visualization
Demonstrated capability to produce written products on a reoccurring basis by working with cross-functional and cross-enterprise teams
Strong written and verbal communication and presentation skills
Communication and presentation skills to senior client and senior internal stakeholder meetings
Weekend and holiday coverage may be required
Bachelor’s degree or equivalent work experience
IS Certifications are desired (CISSP, GSEC, GCFA, GREM, Security+, CISA, CISM).
Email vendor certifications a plus.
Nice to have:
Project management skills a plus
Email vendor certifications a plus.
What we offer:
Cafeteria Program
Home Office Allowance (for colleagues working in hybrid work models)
Paid Parental Leave Program (maternity and paternity leave)
Private Medical Care Program and onsite medical rooms at our offices
Pension Plan Contribution to voluntary pension fund
Group Life Insurance
Employee Assistance Program
Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
Flexible work arrangements to support you in managing work - life balance
Career progression opportunities across geographies and business lines
Socially active employee communities with diverse networking opportunities.