Info Security Tech Sr Analyst

• Identify opportunities to automate and standardize information security controls
• Resolve any vulnerabilities or issues detected in an application or infrastructure
• Analyze source code to mitigate identified weaknesses and vulnerabilities
• Review and validate automated testing results and prioritize actions that resolve issues based on overall risk
• Scan and analyze applications with automated tools and perform manual testing if necessary
• Reduce risk by analyzing the root cause of issues, their impact, and corrective actions
• Direct the development and delivery of secure solutions by coordinating with business and technical contacts
• Assess risk when business decisions are made, ensuring compliance and safeguarding Citigroup, its clients and assets.

• 6-10 years of relevant experience
• Advanced proficiency with Microsoft Office tools and software
• Consistently demonstrates clear and concise written and verbal communication
• Proven influencing and relationship management skills
• Proven analytical skills
• Bachelor’s degree/University degree or equivalent experience
• Master’s degree preferred
• Demonstrable experience of at least 5 years in the field of information security
• Demonstrable experience in conducting security reviews (IS assessments)
• Solid knowledge and experience in information technologies such as Cloud, Databases, APIs, Mobile, Network, Cloud, Web, platforms, environments, hosting, etc.
• Knowledge in identification and management of technological and security risks
• Knowledge in identification and management of threats
• Certifications in technology and security (e.g., CCNA, CISSP, CISM, CISA, CEH, CLOUD, etc.)
• Demonstrable experience in managing and leading teams of 2 to 6 people
• Availability in working hours
• Ability to work under pressure
• Conversational English.

• Certifications in the field of technology and security (e.g., CCNA, CISSP, CISM, CISA, CEH, CLOUD, etc.)
• Experience in leading and managing small teams.

Equal opportunity employer ensuring consideration without regard to protected criteria.