ISO Intermediate Analyst, Citi

Citi

Location:
India, Mumbai

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Not provided

Save Job

Apply Position

Job Description:

The Information Security Ops (ISO) Intermediate Analyst is an intermediate level position responsible for leading efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy. The role is a mid-senior level professional responsible for driving efforts to support governance, risk and compliance for CISO at Citi. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's cyber and information security policy and country regulatory related requirements. The role is part of the Cyber Governance, Control and Policy Team.

Job Responsibility:

Verify with technology teams that technology Information Security (IS) is compliant with standards and meets IS technology strategy goals
Monitor changes in the risk profile of highly critical systems
Assist security incident response teams resolve and close the investigation of incidents
Complete the Risk Assessment process, including maintaining accurate asset inventory, system criticality information, data classification, threat analysis and action plans
Guide the completion of Risk Assessments and other IS related compliance processes, and ensure processes are understood, appropriate controls take place, and remediation of non-compliance is documented and addressed
Promote and educate security awareness within the business
Ensure compliance of information security standards and best practices across multiple disciplines and help security incident response teams resolve and close the investigation of incidents
Has the ability to operate with a limited level of direct supervision
Can exercise independence of judgement and autonomy
Acts as SME to senior stakeholders and /or other team members
Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency
Manage and validate deliverables of all Information Security (IS) programs, ensuring closure per agreed timelines and goals
Work closely with Global & Regional Information Security teams to improve processes and reduce risk, and support the IS regulatory related activities for India
Accountable for delivery of the associated remediation from regulatory assessments
Proficiency in preparing periodic updates / reports / presentation deck for both internal stakeholders and regulators
Provide timely and appropriate updates to regional and global stakeholders
escalate issues in a timely manner to senior management
Build and develop partnerships with business, IT, risk, compliance, IS, senior management staff and stakeholders

Requirements:

2-5 years of relevant experience
Proficient in interpreting and applying policies, standards and procedures
Consistently demonstrates clear and concise written and verbal communication
Proven analytical skills
Bachelor’s degree/University degree or equivalent experience
Minimum 2-3 years or above of relevant experience in Cyber Security Management / Cyber Security Operations / Technology Risk Management / Third-party Risk Management or IT Audit, preferably with experience gained from banking / finance services industry / consultancy / control compliance or legal disciplines
Bachelor’s/University degree or equivalent experience in Computer Science, Cyber Security, Computer/Information Engineering, Information Technology or a related discipline is preferred

Additional Information:

Job Posted:
July 31, 2025

Employment Type:

Fulltime

Work Type:

On-site work

View All Jobs In This Company

Job Link Share:

ISO Intermediate Analyst