Public Cloud Technology Controls Lead Analyst, Citi

Citi

Location:
India, Chennai

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Not provided

Save Job

Apply Position

Job Description:

Public Cloud Technology Controls Lead Analyst role within Citi's Technology & Business Enablement organization, focusing on technology risk and controls management for Public Cloud Infrastructure and Platform as a Service capabilities across providers such as AWS and GCP, and for Artificial Intelligence solutions offered by Cloud Service Providers.

Job Responsibility:

Partner with IA and 2nd Line of Defense, and with Policy Owners when more cloud-friendly policy changes need to be influenced
Advise engineers on application of policy and actively consult policies and prioritization of codified controls with engineering teams
Ensure processes are designed with control in mind and drive transformational change to reduce adoption friction while improving sustainability of risk management processes
Coordinate cross border clearance as needed
Assess the effectiveness of existing controls, identifying areas for improvement, and executing necessary changes
Ensure controls are automated and sustainable for cloud scale, and achieve defense in depth
Collaborate with key stakeholders to assess potential risks, develop risk mitigation activities, and define the acceptable level of risk
Stay informed about regulatory changes and industry best practices related to control management
Appropriately assess risk when business decisions are made
Drive compliance with applicable laws, rules and regulations
Escalate, manage and report control issues with transparency

Requirements:

Relevant work experience in Technology Risk & Controls, or Risk/Security/Compliance organization in a large organization in a heavily regulated industry
At least 2 years of experience in Public Cloud Risk, Governance, Compliance and/or Control
Ability to identify, measure, and manage key risks and controls
Track record leading Control related projects, programs, and/or simplifying processes while ensuring risk is adequately managed
Ability to see the big pictures with high attention to critical details
Strong leadership, decision-making, and problem-solving skills
Strong analytical skills to evaluate complex risk and control activities and processes
Demonstrated ability to influence change and common-sense approaches to modern risk challenges
Demonstrated ability to develop and implement strategy and process improvement initiatives
Demonstrable interest in Public Cloud risk identification and mitigation
Familiarity with DevOps and Site Reliability Engineering (SRE) practices
Demonstrated ability to accurately interpret legal and policy documentation
Experience working with NIST, COBIT, ITIL, CSA, and/or ISO risk and ITSM frameworks
Bachelor's/University degree or equivalent experience

Nice to have:

Experience with First Line of Defense with Second/Third Line of Defense, and regulators
Risk certifications such as CISM, CISSP, CISA, CRISC, CGEIT, CDPSE
Certifications in Public Cloud such as AWS Certified Cloud Practitioner, AWS Certified Security Specialty, or cloud agnostic certifications like CCAK, CCSK, CompTIA Cloud+, CET
Experience in an influence management discipline such as project management or product management
Experience with data privacy concerns and outsourcing regulations
Experience in modern microservices architectures and deployments (docker/kubernetes)
Experience working in a distributed, cloud-based environment using Azure/AWS/GCP
Experience with cloud infrastructure and data services (compute, storage, networking and others)
Experience with Infrastructure as Code (IaC) practices and frameworks
Experience working with cloud-based relational and NoSQL databases

Additional Information:

Job Posted:
August 26, 2025

Employment Type:

Fulltime

Work Type:

Hybrid work

View All Jobs In This Company

Job Link Share:

Public Cloud Technology Controls Lead Analyst