Apply (opens in new window)

Discover your future at Citi

Working at Citi is far more than just a job. A career with us means joining a team of approximately 219,000 dedicated people from around the globe. At Citi, youll have the opportunity to grow your career, give back to your community and make a real impact.

Job Overview

The IT Bus Unit Sr Group Manager manages multiple teams through other managers. In-depth understanding of how own sub-function contributes to achieving the objectives of the function. A good understanding of the industry, direct competitors' products and services, is also necessary in order to contribute to the commercial objectives of the business. Requires thorough understanding of strategic direction of the function within the relevant part of the business, combined with a solid conceptual/practical grounding in both the function and/or area of expertise and related subject areas. Excellent communication skills required in order to negotiate internally, often at a senior level. Some external communication/negotiation may be necessary. Responsible for executing functional strategy in area managed. Determines approach to implementing functional strategy. Accountable for end results, budgeting, planning, policy formulation and contribution to future strategy of the area(s). Impact reflects size of team managed, strategic influence on the business and interaction with other functions or businesses.Full management responsibility for multiple teams, including management of people, budget and planning, to include duties such as performance evaluation, compensation, hiring, disciplinary actions and terminations and budget approval. May be doing involved or responsible for diverse (cross-discipline) activities. Typically, a direct report to a C16 role and function as an intergral member of the functional leadership team within a country/site location, job family, or line of business.

Responsibilities:

• Functions in a Chief Of Staff capacity to ensure strategy is implemented appropriately.
• Ensures the IT organization is defining and implementing its business plan and goals to support the strategy and goals of the organization.
• Collaborates with IT functional/departmental executives and business leaders to create the business plan for IT.
• Scans the external IT environment to provide a common set of planning assumptions.
• Collaborates with Finance and Human Resources to represent the needs of IT and understand the cost and human resources impact of those needs in creating, implementing and adjusting IT business plans.
• Responsible for internal communications, right placement/managed services and technical training. Ensures business unit is meeting or exceeding components of service level agreements.
• Resolves a variety of broad based and complex issues. Uses sound understanding of theories and practices in multiple related subject areas.
• Applies in depth knowledge of how technology integrates within the organization and of direct competitors products and services.
• Has full management responsibilities for team (includes people, budget and planning). Provides evaluative judgment based on analysis of factual information in complicated and unique situations; uses multiple sources of information.
• Impacts the area through responsibility for planning, finances/budget, end results, setting policies and contribution to strategic decisions. Persuades and influences others through communication and diplomacy skills; may negotiate with external parties.
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards.

Qualifications:

• 15+ years of experience in technology planning with extensive experience in business, functional and people management.
• Budget management, Risk & Control management, influencing skills
• Managerial experience

Education:

• Bachelors/University degree, Masters degree preferred

Objetivo del puesto

Liderar el Centro de Inteligencia de Ciberseguridad, integrando monitoreo, deteccin, contencin, automatizacin, inteligencia de amenazas, respuesta ante incidentes y operacin de herramientas de seguridad y ciberseguridad.

El objetivo es anticipar, detectar y contener amenazas de forma eficiente, protegiendo las identidades, certificados digitales, activos tecnolgicos, canales financieros y servicios crticos de la organizacin.

Responsabilidades principales

• Definir la estrategia y evolucin del Centro de Inteligencia de Ciberseguridad hacia un modelo inteligente, automatizado y basado en datos a travs del consumo de un lago de datos de seguridad.
• Liderar la operacin de monitoreo y respuesta 24x7.

• Operar, supervisar y disponer las plataformas de ciberseguridad como; Firewalls, SIEM, SOAR, EDR/XDR, NDR, CASB, DLP, IGA, PAM, PKI, ANTISPAM, Virtual Patching, WAF, NAC, Cloud Security Monitoring, Vulnerabilidades, Segmentacin de Red, UEBA, Playbook de logic apps, Elastic, ente otros.

• Asegurar la correcta integracin de las distintas fuentes de informacin de infraestructura, aplicaciones, nube, identidades, certificados, canales digitales.
• Coordinar con las reas de negocio, operacin, tecnologa y ciberseguridad para la correcta respuesta ante eventos e incidentes de seguridad y ciberseguridad.
• Desarrollar de casos de uso avanzados de correlacin de eventos de seguridad para asegurar su correcta integracin con el monitoreo y automatizacin de alertas, eventos e incidentes de seguridad a travs del desarrollo de playbooks, as como del consumo de las fuentes de informacin de inteligencia.
• Gestionar el ciclo operativo de PKI: emisin, renovacin, monitoreo, revocacin y proteccin de certificados digitales.
• Supervisar la operacin del modelo de IGA (IAM/PAM, MFA, SSO) a travs del gobierno de cuentas humanas, no humanas, cuentas privilegiadas y accesos de alto riesgo.
• Liderar la deteccin, contencin y respuesta ante incidentes de seguridad como; malware, ransomware, fraude digital, amenazas avanzadas persistentes (APT por sus siglas en ingls), abuso de credenciales y ataques contra servicios crticos.
• Desarrollar indicadores de compromiso (IoC por sus siglas en ingls) e indicadores de comportamiento (IoB por sus siglas en ingls).
• Proporcionar contexto sobre actores, motivaciones y capacidades durante un incidente
• Coordinar la contencin de incidentes mediante bloqueo proactivo de comportamiento anormal de las cuentas de humanas y no humanas. revocacin de sesiones, aislamiento de equipos y revocacin de certificados.
• Liderar incidentes crticos, anlisis forense, causa raz y planes de remediacin.
• Coordinar con Tecnologa, Ingeniera, Infraestructura, Riesgo, Fraude, Continuidad y Alta Direccin.
• Gestionar proveedores, niveles de servicio, presupuesto y mejora continua de las capacidades de seguridad.

Conocimientos y experiencia

• +10 aos de experiencia en ciberseguridad y ms de 5 aos liderando SOC, CSIRT u operaciones de seguridad.
• Experiencia en organizaciones financieras, fintech, seguros o medios de pago.
• Dominio operativo en plataformas de Firewall, IDS/IPS, Filtrado de Contenido, VPN, SIEM, SOAR, EDR/XDR, NDR, IAM, PAM, PKI y Threat Intelligence.
• Dominio de redes, sistemas operativos (Windows, Unix, Linux), Indicadores de Compromiso, Gestin de Certificados,
• Experiencia en ingeniera de deteccin, threat hunting, automatizacin y respuesta ante incidentes.
• Conocimientos de gestin de identidades, cuentas privilegiadas, MFA, SSO, RBAC y segregacin de funciones.
• Experiencia en operacin de autoridades certificadoras, certificados digitales, CRL, OCSP y gestin de claves.
• Conocimiento de MITRE ATT&CK, NIST, ISO 27001, ISO 27035, Controles CIS y PCI DSS.
• Experiencia liderando crisis cibernticas, proveedores y equipos multidisciplinarios.
• Capacidad para traducir eventos tcnicos en impacto operativo, financiero y reputacional.

Formacin y certificaciones

• Ingeniera o licenciatura en Sistemas, Informtica, Ciberseguridad, Telecomunicaciones o reas afines.
• Deseable maestra en Ciberseguridad, Tecnologa, Riesgo o MBA.
• Certificaciones deseables: CISSP, CISM, GCIH, GCIA, GCTI, GCDA, certificaciones en IAM/PAM, PKI, cloud, SIEM o SOAR.

Competencias clave

• Liderazgo operativo y gestin de crisis.
• Pensamiento analtico y toma de decisiones bajo presin.
• Visin integral de SOC, IAM, PAM, PKI y controles de seguridad.
• Orientacin a la automatizacin y mejora continua.
• Comunicacin ejecutiva y coordinacin transversal.
• Gestin de proveedores y equipos 24x7.
• Orientacin a resultados y reduccin de tiempos de respuesta.

KPIs principales

• MTTD (Mean Time to Detect): Tiempo promedio de deteccin de amenazas.
• MTTR (Mean Time to Respond): Tiempo promedio de respuesta y contencin.
• MTTC (Mean Time to Content): Tiempo promedio de contencin.
• Cobertura de monitoreo sobre activos, identidades, certificados y servicios crticos.
• Disponibilidad de SIEM, SOAR, EDR/XDR, IAM, PAM, PKI, entre otras.
• Porcentaje de casos de uso y playbooks automatizados.
• Reduccin de falsos positivos y horas operativas.
• Porcentaje de cuentas privilegiadas protegidas mediante PAM y MFA.
• Porcentaje de certificados crticos renovados oportunamente.
• Tiempo de revocacin de certificados o credenciales comprometidas.
• Cumplimiento de SLA, auditoras, simulaciones y ejercicios de respuesta.
• Nivel de madurez y evolucin del SOC/CSIRT.

Reto del puesto

Transformar el Centro de Inteligencia de Ciberseguridad en una capacidad integrada, automatizada y orientada a la anticipacin, capaz de actuar rpidamente sobre eventos, identidades, privilegios, certificados y activos comprometidos, reduciendo el impacto de los incidentes sobre la continuidad y los servicios financieros crticos.

------------------------------------------------------

Job Family Group:

Technology

------------------------------------------------------

Job Family:

Technology Management

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Most Relevant Skills

Please see the requirements listed above.

------------------------------------------------------

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi (opens in new window).

View Citis EEO Policy Statement (opens in new window) and the Know Your Rights (opens in new window) poster.

Apply (opens in new window)