Public Cloud Technology Controls Lead Analyst, Citi

Citi

Location:
United Kingdom, Belfast

Category:
IT - Administration

Contract Type:
Employment contract

Salary:

Not provided

Save Job

Apply Position

Job Description:

As the Public Cloud Technology Controls Lead Analyst, you will play a role in managing technology risks and controls for Citi’s Public Cloud services team. This includes assessing effectiveness of controls, driving policy compliance, and collaborating with teams to ensure cloud scale automation and enhanced risk management processes.

Job Responsibility:

Partner with IA and 2nd Line of Defense, and with Policy Owners when more cloud-friendly policy changes need to be influenced
Advise engineers on application of policy and actively consult policies and prioritization of codified controls with engineering teams who have multiple concurrent domains such as compute, containers, DB, middleware, etc.
Ensure processes are designed with control in mind and drive transformational change to reduce adoption friction (process bureaucracy that slows down public cloud adoption) while improving sustainability of risk management processes
Coordinate cross border clearance as needed
Assess the effectiveness of existing controls, identifying areas for improvement, and executing necessary changes and ensure controls are automated and sustainable for cloud scale, and achieve defense in depth
Collaborate with key stakeholders to assess potential risks, develop risk mitigation activities, and define the acceptable level of risk across various areas of operation
Stay informed about regulatory changes and industry best practices related to control management, ensuring the controls program aligns with these standards
Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of teams and create accountability with those who fail to maintain these standards

Requirements:

Relevant work experience in Technology Risk & Controls, or Risk/Security/Compliance organization in a large organization in a heavily regulated industry, with experience in Public Cloud Risk, Governance, Compliance and/or Control
Ability to identify, measure, and manage key risks and controls
Track record leading Control related projects, programs, and/or simplifying processes while ensuring risk is adequately managed
Ability to see the big pictures with high attention to critical details, supporting an ability to develop and implement strategy and process improvement initiatives with strong leadership, decision-making, and problem-solving skills, and strong analytical skills to evaluate complex risk and control activities and processes
Demonstrated ability to influence change and common-sense approaches to modern risk challenges
Demonstrated ability to develop and implement strategy and process improvement initiatives
Demonstrable interest in Public Cloud risk identification and mitigation, and familiarity with DevOps and Site Reliability Engineering (SRE) practices
Demonstrated ability to accurately interpret legal and policy documentation and experience working with NIST, COBIT, ITIL, CSA, and/or ISO risk and ITSM frameworks

Nice to have:

Experience with as First Line of Defense with Second/Third Line of Defense, and regulators, or experience as Second or Third Line of Defense
Risk certifications such as the CISM, CISSP, CISA, CRISC, CGEIT, CDPSE, etc. and certifications in Public Cloud such as AWS Certified Cloud Practitioner, AWS Certified Security Specialty, or cloud agnostic certifications like CCAK, CCSK, CompTIA Cloud+, CET
Experience in an influence management discipline such as project management or product management
Experience with data privacy concerns and outsourcing regulations
Experience in modern microservices architectures and deployments (docker/kubernetes)
experience working in a distributed, cloud-based environment using Azure/AWS/GCP
experience with cloud infrastructure and data services (compute, storage, networking and others)
experience with Infrastructure as Code (IaC) practices and frameworks
experience working with cloud-based relational and NoSQL databases

What we offer:

27 days annual leave (plus bank holidays)
A discretional annual performance related bonus
Private Medical Care & Life Insurance
Employee Assistance Program
Pension Plan
Paid Parental Leave
Special discounts for employees, family, and friends
Access to an array of learning and development resources

Additional Information:

Job Posted:
August 23, 2025

Employment Type:

Fulltime

Work Type:

Hybrid work

View All Jobs In This Company

Job Link Share:

Public Cloud Technology Controls Lead Analyst