Information Security Senior Analyst, Citi

Citi

Location:
India, Mumbai

Category:
IT - Software Development

Contract Type:
Employment contract

Salary:

Not provided

Save Job

Apply Position

Job Description:

The Information Security Senior Analyst is a senior level professional responsible for driving efforts to support governance, risk, and compliance for CISO at Citi. Responsibilities include ensuring the execution of Information Security directives and activities in alignment with Citi's cyber and information security policy, managing IS program deliverables, supporting regulatory exams, performing cyber attack simulations and penetration testing, preparing reports, and acting as a cybersecurity SME. The role requires at least 8 years of experience in relevant fields and qualifications like CISSP, CRISC, or CISM.

Job Responsibility:

Manage and validate deliverables of all Information Security (IS) programs, ensuring closure per agreed timelines and goals
Work closely with Global & Regional Information Security teams to improve processes and reduce risk, and support the IS regulatory-related activities for India
Prior successful regulatory exam handling/delivery experience (Bank/Assessor/Regulator side) in a senior capacity
Manage internal/external resources to organize cyber attack simulations and penetration testing, coordinating and overseeing vulnerability, mitigation/remediation/correction action plans, and issues management process
Deliver complex regulatory assessments and requirements
Accountable for associated remediation from regulatory assessments
Proficiency in preparing periodic updates/reports/presentation decks for both internal stakeholders and regulators
Provide timely and appropriate updates to regional and global stakeholders
escalate issues in a timely manner to senior management
Build and develop partnerships with business, IT, risk, compliance, IS, senior management staff and stakeholders
Facilitate and lead cross-functional meetings
Assist in developing analytics and reporting to track effectiveness of processes and identify potential improvements
Act as IS/Cybersecurity SME to senior stakeholders and/or team members.

Requirements:

Minimum 8 years or above of relevant experience in Cyber Security Management / Cyber Security Operations / Technology Risk Management / Third-party Risk Management or IT Audit, preferably with experience gained from banking / finance services industry / consultancy / control compliance or legal disciplines
Experience in assessing cyber regulatory compliance such as from RBI or SEBI
Relevant professional qualifications with Risk / Security management e.g. CISSP, CRISC, CISM, CISA, or equivalent
Strong understanding of International Standards/Frameworks such as: NIST, ISO 27001 series, COBIT, CIS, GDPR, DORA, etc.
Proficient in interpreting and applying policies, standards and procedures
Excellent project management and organizational skills (PMP, PRINCE2, etc. is a plus)
Strong consultation, reporting writing and communication skills with high proficiency in both spoken and written English.

Nice to have:

PMP, PRINCE2
Bachelor’s/University degree or equivalent experience in Computer Science, Cyber Security, Computer/Information Engineering, Information Technology or a related discipline
Industry-recognized cybersecurity-related certifications such as CISSP, CISA, CISM, CRISC, ISO 27001.

Additional Information:

Job Posted:
June 11, 2025

Employment Type:

Fulltime

Work Type:

On-site work

View All Jobs In This Company

Job Link Share:

Information Security Senior Analyst