The Info Security Prof Senior Mgr is a senior management level position responsible for accomplishing results through the management of a team or department in an effort to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.
**Responsibilities**:
- Establish and manage security solutions for a functional area
- Develop Corrective Action Plans for all IS gaps and monitor discovered issues to completion
- Facilitate the implementation of approved IS tools and identify and propose new or improved security solutions or emerging technologies
- Ensure IS compliance and seek opportunities to enhance the efficiency of IS policies and procedures
- Identify significant IS threats and vulnerabilities, and define appropriate controls for discovered threats, documenting the business response
- Communicate and discuss changes to IS regulations and standards with Business and Program owners
- Manage project deadlines, deliverables, planning, budgeting and policy formulation for the team, including short-term resource planning
**Qualifications**:
- 6-10 years of relevant experience
- Database knowledge preferred
- Additional technical certifications preferred
- Consistently demonstrates clear and concise written and verbal communication
- Proven influencing and relationship management skills
- Proven analytical skills
**Education**:
- Bachelor's degree/University degree or equivalent experience
- Master's degree preferred
This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.
This position acts as a liaison with local business and functions team and the global Cybersecurity capacities in order to maintain a coordinated and consistent approach to address cyber-events (incidents), cybersecurity exercises and relevant cybersecurity related conversations (i.e. regulators, partners, vendors, peers, customers).
**Cyber-simulation excercises experience.**
**Cyber exercises playbook definition.**
**Crisis Management Team (CMT) training,**
**Cybersecurity policy or standard definition.**
Cibersecurity manager also leads a team of experts that will track any information security incident and ensure adequate compliance with regulatory requirements, including regulatory and customer notifications, guide the business and third parties on adequate incident containment and recovery and ensure adequate root/cause analysis are being developed and any learning action plans are addressed.
**Qualifications**:
- 8+ years of relevant experience
- Proven experience with Databases preferred
- Additional technical certifications preferred (desirable)
- Knowledge in ISO27001
- Advanced analytical and problem solving skills
- Consistently demonstrates clear and concise written and verbal communication
- Demonstrated ability to remain unbiased in a diverse working environment
- Fluent conversational English (spoken and written) (must)
- Ability to create network connections with senior management stakeholders
**Responsibilities**:
- Educate and advise business and technical leaders on the development, delivery and management of security solutions
- Define and implement security policies and standards, and **prepare periodic Information Security (IS) management reports**:
- Provide security oversight for major system designs and monitor the implementation of approved Corrective Action Plans
**Education**:
- Bachelor's degree/University degree or equivalent experience
- Master's degree preferred**Job Family Group**:
Technology
- **Job Family**:
Information Security
- **Time Type**:
Full time
- Citi is an equal opportunity and affirmative action employer.
Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
View the "**EEO is the Law**" poster. View the **EEO is the Law Supplement**.
View the **EEO Policy Statement**.
View the **Pay Transparency Posting
