This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Citibank, N.A. seeks an Info Security Professional Senior Group Manager for its New York, New York location. 100% telecommuting permitted from any location in the U.S.
Job Responsibility:
Develop and enhance the enterprise security architecture principles and ensure that the principles are adhered to for software development
Review the software development lifecycle for secure practices, and advise on the implementation of application security controls and DevOps practices
Manage a team of solutions architects to develop strategies and plans for improving architecture and application security
Partner with enterprise Architecture team and Emerging Technology team to drive architecture solutions with software development teams
Calculate the need for security measures and facilitate application security measures
Engage in the permit process as part of proactive risk management agenda, and conduct security reviews throughout the lifecycle for applications deployed on premise and in cloud
Analyze security policies, and review application development and maintenance practices
Revise information security policies in accordance with changing and emerging security standards
Conduct and facilitate information security reviews, cloud architecture reviews, and table-top, red-team, and scenario analysis exercises
Provide security solutions for cloud computing architecture
partner with business and technology to migrate systems to cloud providers
Create, review, and maintain application security reference architecture based on DevSecOps models and industry frameworks
Perform threat modelling for critical back-office payment processors and clearing channels
Prioritize architecture deliverables and establish short-term to long-term architecture
Maintain Information Security risk management framework and assess applications for emerging areas like cloud security and Machine Learning
Participate in evaluation and selection of applications and systems with a focus on IS implications
Identify new requirements or enhancements to information security standards and processes
Evaluate and recommend new and emerging vendor products and technologies to mitigate cyber risks
Develop training programs for cyber architects, create design patterns for solutions, promote standardization, and improve organization’s cyber architecture maturity
Requirements:
Master’s degree, or foreign equivalent, in Cybersecurity, Computer Science, Mathematics, Engineering or related field and 4 years of progressive experience as an Information Security Officer, Security Architect, or related position involving Security Architecture and Information Security for business applications
Alternatively, employer will accept a Bachelor’s degree in the stated fields and 6 years of the specified experience
Full span of experience must include: Security architecture
Application security
Information Security for business applications
Risk assessment application vulnerabilities
Open-source software security
Security in DevOps
and .NET, Java
What we offer:
medical, dental & vision coverage
401(k)
life, accident, and disability insurance
wellness programs
paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays