Third Party Information Security Risk Analyst, Citi

Citi

Location:
United States, Irving

Category:
IT - Administration

Contract Type:
Not provided

Salary:

125760.00 - 188640.00 USD / Year

Save Job

Job offer has expired

Job Description:

The Third Party Information Security Risk Analyst plays a key role in Citi’s Third Party Information Security Assessment (TPISA) program’s ability to adapt quickly to changing needs to meet objectives and strategy. This IS Risk Analyst position requires Third Party Risk Management knowledge and will be focused primarily on gathering and analyzing information from policies and standards dealing with Citi Third Parties (such as the Citi Supplier Selection and Management Policy) and how they intersect with the IS assessment process of a supplier’s IS controls. The Third Party IS Risk Analyst will also work with Citi Information Security Policy and Standard owners to ensure alignment with the TPISA Process and procedures.

Job Responsibility:

Individually contribute, lead or participate as a team member on projects, as well as maintain knowledge of IS risk, standards, and policy documents
Actively participate in knowledge sharing and proliferation of best practices
Analyze data or processes in order to develop metrics, determine root causes of problems or deficiencies and suggest solutions
Contribute to TPISA efforts that address Regulatory (e.g. OCC) and/or Internal Audit concerns/exams
Support documentation and maintenance of TPISA procedures as required
Identify and support new continuous process improvements

Requirements:

6-10 years of relevant experience
2+ years in Information Security and/or a role dealing with supplier management
Achieved industry certifications such as CISSP, CISA, Security+, is a plus
Working knowledge of current Third Party standards and policies
Experience in compliance and risk management requirements and adherence practices
Project management experience with cross-functional and/or global teams
High attention to detail and accuracy
Strong analytic, problem solving and conceptual thinking skills
Ability to multi-task and maintain priorities
Effective and clear verbal, written and interpersonal communication skills

Nice to have:

Achieved industry certifications such as CISSP, CISA, Security+

What we offer:

medical, dental & vision coverage
401(k)
life, accident, and disability insurance
wellness programs
paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays

Additional Information:

Job Posted:
August 09, 2025

Expiration:
August 15, 2025

Employment Type:

Fulltime

Work Type:

On-site work

View All Jobs In This Company

Job Link Share:

Third Party Information Security Risk Analyst