Job description

The Information Security Business Risk Officer is responsible for driving efforts in governance, risk, and compliance for the CISO at Citi, with a focus on managing and validating information security programs and regulatory assessments. The role requires over 10 years of relevant experience, strong understanding of international security standards, and qualifications such as CISSP, CRISC, CISM, or CISA.

Responsibility

• Manage and validate deliverables of all Information Security programs.
• Manage regulatory exams and internal & external audits.
• Organize cyber-attack simulations and oversee vulnerability management.
• Provide updates and escalate issues to senior management.
• Facilitate cross-functional meetings and develop partnerships with stakeholders.

Qualifications

• Bachelor’s/University degree or equivalent experience in related fields.
• Minimum 10 years of relevant experience in cybersecurity management or related fields.
• Industry-recognized cybersecurity certifications like CISSP, CISA, CISM, CRISC, ISO 27001.