Information Security Lead Analyst Job at Citi (Budapest)

Lead Security Analyst

Provide technology consulting to external customers and internal project teams. ...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's or Master's degree in Computer Science, Information Security, or related field
Minimum 10 years in IT security, with at least 5 years in a leadership role
Proven experience with enterprise firewalls (Palo Alto, Fortinet, Check Point)
Strong cloud security knowledge (AWS, Azure, Google Cloud)
Experience with DDoS mitigation tools (Cloudflare, Akamai, AWS Shield)
Proficiency with Burpsuite
Hands-on with SIEM, SOAR, EDR, and vulnerability management tools
Strong analytical thinking and problem-solving ability
Excellent communication and stakeholder management

Job Responsibility

Develop and maintain the IT security roadmap aligned with cloud and enterprise infrastructure
Lead security design reviews for new systems, services, and cloud deployments
Deploy, configure, and manage network security appliances (e.g., next-gen firewalls, IDS/IPS, WAF)
Implement cybersecurity protocols including endpoint protection, identity management, and access control
Design and operate DDoS protection mechanisms for critical systems
Enforce security measures across public, private, and sovereign cloud environments
Monitor and audit cloud configurations for compliance with ISO 27001, NIST, CIS, etc.
Lead threat modeling, risk assessments, and vulnerability management
Oversee incident detection, response, and recovery processes
Ensure compliance with GDPR, HIPAA, PCI-DSS, and other regulations

What we offer

Health & Wellbeing benefits
Personal & Professional Development programs
Unconditional Inclusion environment
Comprehensive suite of benefits supporting physical, financial and emotional wellbeing

Fulltime

Information Security Lead Analyst

As part of Citi Infrastructure Defense team, the analyst position will participa...

Location

Singapore , Singapore

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

8+ years of experience with multiple security disciplines and strong understanding of layered defense concepts
Deep understanding of TCP/IP technologies and knowledge of network routing protocols
Experience defining enterprise security strategy and ecosystem across diverse products
Strong hands on experience with firewall and proxy technologies (Bluecoat, Squid, NGINX)
Large Scale Network and Security design experience is essential
Work with and understand regulatory and risk management requirements
Strong unix / linux experience
Scripting (Python/Perl/Bash)
University / College degree in any STEM area or equivalent industry/technology knowledge

Job Responsibility

Identify opportunities to automate and standardize information security controls
Resolve any vulnerabilities or issues detected in an application or infrastructure
Analyze source code to mitigate identified weaknesses and vulnerabilities within the system
Review and validate automated testing results and prioritize actions that resolve issues based on overall risk
Scan and analyze applications with automated tools, and perform manual testing if necessary
Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions
Direct the development and delivery of secure solutions by coordinating with business and technical contacts
Assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup

What we offer

Opportunity to work on the internal security posture for a large financial and thus shaping the industry overall
Exposure to a broad range of investment technology businesses and products
Access to our word class testing lab with physical hands on using hundreds of devices in the IT security ecosystem

Fulltime

Senior Information Security Compliance Analyst

We're looking for a technically grounded Senior IS Compliance Analyst who speaks...

Location

United States , Chicago

Salary:

90000.00 - 130000.00 USD / Year

Blume Global

Expiration Date

Until further notice

Requirements

Hands-on experience in technical security roles such as Security Operations, Incident Response, Security Analysis, penetration testing, or similar
Practical knowledge of security tools, SIEM platforms, vulnerability management, and security monitoring
and ability to read and understand security logs, configurations, and technical documentation
6+ years of total experience with significant time in GRC
Working knowledge of ISO 27001, NIST frameworks, SOC 1/2, and GDPR requirements
Experience developing and implementing information security policies and controls
ISO 27001:2022 Lead Implementer and Lead Auditor certification

Job Responsibility

Lead technical security assessments and integration of acquired companies, mapping their security architectures and controls to our GRC frameworks, identifying gaps, and building remediation roadmaps that address both technical security and compliance alignment
Bridge technical security and business stakeholders by evaluating risks through a technical lens, working alongside security engineering teams to translate GRC requirements into practical security measures, and communicating effectively across technical and non-technical audiences
Develop and harmonize security policies and control frameworks across acquired entities, ensuring they're both audit ready and operationally sound, while translating between technical security requirements and governance documentation
Own customer security questionnaire responses by leveraging your hands-on security background to provide detailed, accurate answers and collaborating with infrastructure, application security, and operations teams to gather technical evidence
Drive continuous improvement of our GRC program through technical security enhancements, meaningful security and compliance metrics, and process improvements that increase both control effectiveness and operational efficiency

What we offer

health and welfare benefits
tuition assistance
401K savings and other retirement programs
employee assistance programs

Security Lead – Cloud & IT Security

HPE Operations is our innovative IT services organization. It provides the exper...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's or Master's degree in Computer Science, Information Security, or related field
Minimum 10 years in IT security
At least 5 years in a leadership role
Proven track record in deploying and managing enterprise firewalls (e.g., Palo Alto, Fortinet, Check Point)
Strong knowledge of cloud security for AWS, Azure, and/or Google Cloud
Experience with DDoS mitigation solutions (e.g., Cloudflare, Akamai, AWS Shield)
Experience with Burpsuite
Hands-on knowledge of SIEM, SOAR, EDR, and vulnerability management tools
Strong analytical thinking
Problem-solving ability

Job Responsibility

Develop and maintain the organization's IT security roadmap aligned with cloud and enterprise infrastructure
Lead security design reviews for new systems, services, and cloud deployments
Deploy, configure, and manage network security appliances including next-generation firewalls, IDS/IPS, and web application firewalls
Implement and maintain cybersecurity protocols, including endpoint protection, identity management, and access control policies
Design and operate DDoS protection mechanisms to ensure availability of critical systems
Implement and enforce security measures in public, private, and sovereign cloud environments
Monitor and audit cloud configurations to ensure compliance with industry standards (ISO 27001, NIST, CIS, etc.)
Lead threat modeling, risk assessment, and vulnerability management initiatives
Oversee incident detection, response, and recovery processes to minimize business impact
Ensure adherence to regulatory and compliance requirements such as GDPR, HIPAA, PCI-DSS

What we offer

Health & Wellbeing benefits
Personal & Professional Development programs
Unconditional Inclusion environment
Comprehensive suite of benefits supporting physical, financial and emotional wellbeing

Fulltime

Security & Privacy Analyst

The Security & Privacy Analyst will play a key role in protecting Spectrum.Life’...

Location

United Kingdom

Salary:

Not provided

Spectrum Life

Expiration Date

Until further notice

Requirements

Experience in information security, privacy, compliance, or a related field
Strong understanding of GDPR, data protection principles, and privacy best practices
Familiarity with security operations, vulnerability management, and incident response
Experience with security tools (e.g., SIEM, endpoint protection, logging platforms)
Ability to interpret risks and communicate them clearly to technical and non-technical audiences
Strong documentation, analytical, and problem-solving skills
Excellent attention to detail and commitment to quality
Experience in health-tech, clinical platforms, or handling sensitive health data
Certifications such as ISO 27001 Lead Implementer/Auditor, CompTIA Security+, CISSP, CIPP/E, or equivalent
Experience supporting audits or managing compliance frameworks

Job Responsibility

Monitor, assess, and respond to security alerts, incidents, and vulnerabilities across the technology environment
Support security operations activities including log analysis, threat detection, endpoint security, and access control management
Conduct regular vulnerability assessments and coordinate remediation with relevant teams
Assist in maintaining and improving security tools, controls, and frameworks (e.g., SIEM, IAM, MDM, KnowBe4, encryption standards)
Support third-party security reviews and due diligence assessments
Participate in business continuity and disaster recovery planning and testing
Support GDPR and other applicable privacy frameworks (e.g., ePrivacy, UK GDPR, HIPAA-aligned practices for clinical contexts)
Conduct Data Protection Impact Assessments (DPIAs) and Legitimate Interest Assessments (LIAs)
Assist in maintaining Records of Processing Activities (RoPA)
Review new product features and vendor integrations for compliance with privacy-by-design and security-by-design principles

What we offer

Full time permanent contract
Competitive salary (Dependent on experience)
In-office, remote or hybrid working options
25 days annual leave
24/7 EAP and a wide range of health and wellbeing supports
Extensive list of employee perks and benefits

Fulltime

Senior Information System Security Officer

We are seeking a highly skilled and mission-driven Senior Information Systems Se...

Location

United States , Clarksburg

Salary:

Not provided

Innovative Management & Technology Services

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field (or equivalent combination of education and experience)
8+ years of progressive experience in information systems security, with at least 3 years in a senior-level or lead ISSO role supporting federal or state government agencies
Strong working knowledge of: NIST 800-53, RMF, FISMA, OWASP Top 10, and SANS Institute standards
SAFe Agile environments and integrating security in Agile workflows
Networking, Linux/Windows system administration, and secure software development practices
Cloud platforms (AWS, Azure, GCP) and related security tools (e.g., AWS Security Hub, Azure Defender)
Experience in managing security documentation, participating in audits, and working with compliance frameworks
Relevant certifications such as CISSP, CISM, Security+, CEH, or equivalent
Active Top Secret clearance is required
U.S. Citizenship is required

Job Responsibility

Lead the implementation and maintenance of system security controls in compliance with federal cybersecurity frameworks, including NIST SP 800-53, RMF, OWASP, DISA STIGs, and Common Criteria
Oversee the full lifecycle of Authorization to Operate (ATO) processes, including preparation of System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, and risk assessments
Serve as a senior security advisor and liaison to system owners, developers, DevOps engineers, and government stakeholders
Participate in technical reviews of system architecture and ensure secure design of virtualized and software-defined infrastructures
Support integration of security controls into CI/CD pipelines using DevSecOps principles and tools (e.g., Jenkins, GitLab CI, SonarQube, Snyk)
Provide security engineering support for modern cloud environments, including AWS, Azure, or Google Cloud Platform, and assess cloud-native security capabilities
Conduct vulnerability assessments, interpret scan results from tools like Tenable, Nessus, Splunk, or Qualys, and lead remediation efforts
Mentor junior ISSOs and analysts on security policies, best practices, and tool usage
Ensure continuous monitoring activities are aligned with organizational risk tolerance and compliance goals

What we offer

competitive compensation
excellent benefits including tuition reimbursement and employer-contributed 401K
referral bonuses

Fulltime

Cyber Information Assurance Analyst - Junior Assessor

The Cyber Information Assurance Analyst supports the customer by performing anal...

Location

United States , Ft. Meade, MD

Salary:

65000.00 - 70000.00 USD / Year

Chickasaw Nation Industries, Inc (CNI)

Expiration Date

Until further notice

Requirements

The ability to obtain, maintain and access classified information at the TS/SCI level
DoD 8570 IAM/IA Technical (IAT) Level II certification
Familiarity with STIGs (Security Technical Implementation Guides), Security Requirement Guides (SRGs), Plan of Action and Milestones (POA&Ms) and cybersecurity best practices
Understanding of the RMF process, NIST SP 800- 37, NIST SP 800-53, CNSSI 1253
Familiarity with relevant tools such as eMASS, STIG Viewer, Nessus, ACAS, SCAP, or HBSS
Strong written and verbal communication skills for reporting assessment findings
This position requires travel ~85% CONUS & OCONUS
Bachelor's Degree and a minimum of one to two (1-2) years of experience in systems security, or equivalent combination of education/experience

Job Responsibility

Conducts cybersecurity assessments, audits, and inspections for DoD organizations and partners handling DoD information or connecting to the DoDIN
Evaluates systems and Defensive Cyberspace Operations using cyber threat emulation and performance-based testing
Adheres to policies and processes for each assessment type
Supports assessment development and execution to ensure security expertise is properly applied
Coordinates logistics, test plans, and scope with the SCA Team Lead
Performs vulnerability assessments, capture results using STIG Viewer or designated tools, and document findings in eMASS
Analyzes security gaps and provide mitigation recommendations
Validates cybersecurity controls, TTPs, STIGs, RMF controls, and compliance with DoD policies and guidelines
Provides risk analysis and assessment results for authorization recommendations
Participates in daily assessment reviews, in-briefs, and out-briefs, sharing findings with the SCA-R

What we offer

Medical
Dental
Vision
401(k)
Family Planning/Fertility Assistance
STD/LTD/Basic Life/AD&D
Legal-Aid Program
Employee Assistance Program (EAP)
Paid Time Off (PTO) – (11) Federal Holidays
Training and Development Opportunities

Fulltime

Cyber Security-Fraud Analyst

The L2 Support Fraud Detection Senior Analyst is a pivotal team member responsib...

Location

India , Chennai

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

Tools: Octoflow, Mosaic
conduct investigations and reporting using Octoflow and Mosaic platforms
provide recommendations based on analytics derived from these tools
support secure integration of APIs and web services within fraud detection platforms
liaise with developers to validate and enhance security features in applications
analyse and correlate logs using SIEM solutions to identify and remediate suspicious activity
respond to real-time alerts and participate in threat hunting operations
integrate threat intelligence feeds into operational systems
regularly update detection mechanisms in response to emerging risks
lead and document the resolution of escalated fraud incidents

Job Responsibility

Conduct investigations and reporting using Octoflow and Mosaic platforms
provide recommendations based on analytics derived from these tools
support secure integration of APIs and web services within fraud detection platforms
liaise with developers to validate and enhance security features in applications
analyse and correlate logs using SIEM solutions to identify and remediate suspicious activity
respond to real-time alerts and participate in threat hunting operations
integrate threat intelligence feeds into operational systems
regularly update detection mechanisms in response to emerging risks
lead and document the resolution of escalated fraud incidents
collaborate with cross-functional teams for swift containment, investigation, and recovery

What we offer

Inclusive and respectful work environment
positions open to people with disabilities.

Fulltime

Select Country

Information Security Lead Analyst

Job Responsibility

Requirements

What we offer

Looking for more opportunities?

Information Security Lead Analyst

Lead Security Analyst

Information Security Lead Analyst

Senior Information Security Compliance Analyst

Security Lead – Cloud & IT Security

Security & Privacy Analyst

Senior Information System Security Officer

Cyber Information Assurance Analyst - Junior Assessor

Cyber Security-Fraud Analyst

Our AI answers in your language