This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The India Cyber Controls Lead (CCL) is a senior management level position responsible for accomplishing results through the management of a team or department in an effort to prevent, monitor and respond to information/data breaches and cyber-attacks. The candidate is expected to work with CISO teams globally and country stakeholders from first line, second line and third line. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy. This leadership position is crucial for managing cyber controls, audits, and regulatory engagement in India. Responsibilities include CISO representation and incident handling, are vital for compliance and cyber threat response.
Job Responsibility
Manage a large/complex team or multiple teams, overseeing resources, budget, policy formation and short to medium term planning
Manage and support risk and control programs for the organization including working with global teams to effectively deliver quality information security services to businesses in India
Manage and validate deliverables of all Information Security (IS) programs, ensuring closure per agreed timelines and goals
Perform Business Consulting Activities on IS topics, and ensure Information Security Officer (ISO) consulting services are performed
Conduct cost-benefit analysis to justify IS investment, and build the IS team by promoting partnerships, and marketing IS developments
Partner with Global Information Security Officers and Global Information Security Program Managers to improve processes and reduce risk
Ensure risks are identified, assessed, mitigated and controlled, and assist Security Incident Response Teams as the Business IS Consultant
Ensure Control Preparedness and control effectiveness, as part of the Audit preparedness exercise, ensuring IS programs are audit ready
Manage critical regulatory interactions and assessments making optimum use of available resources
Ensure CISO presence in appropriate country forums and conduct regulatory required meetings and discussions
Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards
Requirements
12+ years of relevant experience
Demonstrable information security risk knowledge based on working in similar environments and situations
Excellent verbal and written communication skills and ability to comfortably interact with senior management as well as external agencies and regulators
Advanced Microsoft Office skills
Demonstrated ability to collaborate with a variety of analytical groups and service delivery organizations
Advanced analytical and problem solving skills
Consistently demonstrates clear and concise written and verbal communication
Proficient in interpreting and applying policies, standards and procedures
Demonstrated ability to remain unbiased in a diverse working environment
Bachelor’s degree/University degree or equivalent experience