Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.
About Our Team:
The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients', our revenue, our employees and our proprietary data. We manage information security as one end-to end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.
This role will report to the Cybersecurity the Manager’s Control Assessment (MCA) Manager, responsible for programs and activities related to Citi’s Transformation for MCA and implementation of the future-state MCA for CISO organization. This role will be dedicated on transformation efforts and high-quality implementation as well as support execution of current MCA business-as-usual (BAU) activities and implement a sustainable program that can cater to CISO/Cyber’s needs.
Your responsibilities will be:
Manage the planning, coordination, and execution of MCA Transformation program for CISO
Support efforts in Global Process MCA Profiles (GPMPs) and Continuous Risk Management (CRM) for CISO
Gain deep knowledge of MCA’s Standard, Procedure, and tools to support future-state MCA
Support Citi’s Enterprise Architecture Methodology (EAM) efforts by which taxonomies and processes interlink with each other, establishing a multifaceted matrix to inform decision-making and simplification
Support CISO Business Processes, Control Owners, and Global Assessment Unit (GAU) Owners in their responsibilities related to MCA and CRM execution
Identify and document key controls necessary for mitigation of cybersecurity risk
Be a hands-on Subject Matter Expert (SME) with the ability to drive problem solving and root cause analyses, simplify complex messages and summarize key points
Foster constructive dialogue and facilitate open discussion, sharing of knowledge and experience with customers and stakeholders
Actively manage relationships with CISO business partners and risk management teams to achieve sustained success
Educate and train people at all levels on how to apply basic tools and methodologies to achieve improvement objectives
Establish relationships that balance short-term gains with long-term considerations
