Information Security Lead Analyst Job at Citi (Budapest)

Lead Analyst, Information Security Governance & Compliance

Beacon Hill Technologies is partnering with a client to identify a Lead Analyst,...

Location

United States , Boca Raton

Salary:

Not provided

Beacon Hill

Expiration Date

Until further notice

Requirements

Practical, working knowledge of audit and assurance concepts and terminology
Experience supporting both internal and external audits
Ability to evaluate the quality and sufficiency of audit evidence
Strong attention to documentation, traceability, and control effectiveness
Prior experience in information security governance, compliance, or risk management
Demonstrated ability to lead work while remaining directly involved in execution
Clear communication skills, particularly when explaining audit or compliance topics
Bachelor’s degree in Information Security, Risk Management, or a related discipline
7+ years of experience in governance, risk, and compliance or information security roles
Familiarity with security and control frameworks such as NIST or ISO

Job Responsibility

Support and guide audit, compliance, and risk activities within the information security organization
Ensure audit readiness
Coordinate audit responses
Validate the quality and completeness of evidence

Information Security Professional Lead Analyst - Vice President

The Information Security Professional Lead Analyst is an intermediate level posi...

Location

Philippines , City of Taguig, Metro Manila

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

8-10 years of relevant experience including 5 years in information security
Additional technical certifications are preferred. CISA CISSP industry recognized certification
Knowledge Artificial intelligence risk management preferred
Demonstrated ability to research and apply current information regarding the IS field
Consistently demonstrates clear and concise written and verbal communication
Proven influencing and relationship management skills
Proven analytical skills
Bachelor’s degree/University degree or equivalent experience
Master’s degree preferred

Job Responsibility

Develop corrective action language for Information Security (IS) gaps and ensure risk closure meets Citi requirements or industry best practices
Facilitate the implementation of approved IS tools and identify/recommend new or improved security solutions or emerging technologies
Mitigate risk by analyzing the root cause of issues, impacts to business, and required corrective actions and develop security solutions
Ensure IS compliance and seek opportunities to enhance the efficiency of IS policies and procedures
Identify significant IS threats and vulnerabilities, and define appropriate controls for discovered threats, documenting the business response
Disseminate changes to IS regulations and standards to Business and Program owners
Provide Information Security advice and counsel as needed
Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency

Fulltime

Information Security Professional Lead Analyst

Information Security Lead Analyst will be responsible for analyzing program data...

Location

India , Pune

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

At least 12+ years of strong data analysis and report development experience
7+ years of experience in information security or related technology experience required
At least 7+ years’ experience with Business Intelligence Reporting tools like Cognos, Tableau
At least 7+ years’ experience with Databases like Oracle, SQL Server, Microsoft Access
Strong Business Intelligence Developer Skills
Strong understanding of application development life cycle, CI/CD and DevOps concepts
Excellent Excel data analysis and Access database skills
Excellent SQL Skills
Experience with issue resolution - ability to research, identify and communicate solutions
Consistently demonstrates clear and concise written and verbal communication

Job Responsibility

Design and implement a solution for performance measurements on effectiveness of controls and overall vulnerability assessment program
Analyze trends on assets security health posture and report using visualization tools for program review with management and stakeholders
Analyze and report aggregated data from multiple data sources
Develop data visualization mock-ups for monitoring program data trends and communicate using analytical tools
Develop reports for tracking program effectiveness and update power point deck for weekly , monthly and quarterly updates
Develop, optimize and provide continuous support for reports and ad-hoc queries from end user
Create dashboards with parameters and interactive drill down functionality
Analyze trends on assets security health posture and report using visualization tools for program review with management and stakeholders
Excellent Analytical Ability - Understand the systems and data flow at a high level to evaluate if appropriate controls are in place for the standards
Provide timely, accurate, and actionable reporting on application vulnerability activity, trends, service levels, and areas of concern to senior management

Fulltime

New

Lead Security Analyst

Made Tech helps UK public sector organisations build and run better digital serv...

Location

United Kingdom , Bristol; London; Manchester; Swansea

Salary:

65000.00 - 80000.00 GBP / Year

Made Tech

Expiration Date

Until further notice

Requirements

Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
CompTIA Advanced Security Practitioner (CASP+)
Experience leading detection engineering in a SOC or similar environment — including writing and tuning detections in KQL, SPL, EQL, or Sigma, and managing coverage against MITRE ATT&CK
Experience designing or improving a log and telemetry pipeline, including application-level telemetry from cloud-hosted services (AWS is a strong preference at this grade), with an understanding of how to design monitoring for failure modes and degraded states
Evidence of running the intelligence cycle as a managed discipline — collection planning, production, and feedback — rather than consuming finished intelligence
Working knowledge of UK government security standards and frameworks, including NCSC CAF Objective C, GovAssure, and OFFICIAL handling requirements
Experience establishing incident response practice — playbooks, severity models, and exercises — not just responding to individual incidents
Evidence of growing the technical capability of less experienced analysts through pairing, structured mentoring, or coaching, including setting clear goals and tracking progress over time
Experience anchoring delivery on client outcomes rather than task completion — challenging the brief where it serves the client and making value visible rather than reporting effort

Job Responsibility

Set the detection engineering standard — author, tune, and peer-review detections in KQL, SPL, EQL, or Sigma
manage the false-positive backlog
map coverage to MITRE ATT&CK
and train L1/L2 analysts to write and tune detections themselves
Own the threat-landscape narrative for your engagement — turn intelligence from NCSC advisories, sector feeds, and threat actor reporting into hunt themes, coverage gap analysis, and detection priorities that the SOC and client stakeholders can act on
Run the intelligence cycle as a managed discipline — maintain a collection plan, produce timely and rigorous intelligence products, and build feedback loops that keep the cycle honest and improving
Establish and lead security incident response practice — build playbooks, define the severity model, run exercises, and lead the team's response to significant incidents
run blameless post-mortems that the team actually learns from
Design the log and telemetry pipeline that detections run on — including bespoke application telemetry in cloud environments, not just commodity endpoint feeds
ensure the right signals are collected, parsed, and retained for both detection and investigation

What we offer

30 days Holiday
Flexible Working Hours
Flexible Parental Leave
Remote Working
Paid counselling
Smart Tech scheme
Cycle to work scheme
individual benefits allowance which you can invest in a Health care cash plan or Pension plan
optional social and wellbeing calendar of events

Fulltime