Information Security Risk Lead, Citi

Information Security Risk Lead

Citi

Location:

Thailand, Bangkok

Category:

Banking

Contract Type:

Employment contract

Salary:

Not provided

Save Job

Apply Position

Job Description:

The Information Security Risk Lead is responsible for driving efforts to support governance, risk and compliance for CISO at Citi. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's cyber and information security policy and country regulatory related requirements.

Job Responsibility:

Manage and validate deliverables of all Information Security (IS) programs, ensuring closure per agreed timelines and goals
Engagement with local regulators BOT, SEC, TB-CERT, Thai-CERT, MDES, NCSA, etc. on IS related matters
Manage regulatory exams and internal & external audits
Work closely with Global & Regional Information Security teams to improve processes and reduce risk, and support the IS regulatory related activities for Thailand
Manage internal/external resources to organize cyber-attack simulations exercise, coordinating and overseeing vulnerability, mitigation/remediation/correction action plans, and issues management process
Accountable for delivery of the associated remediation from regulatory assessments
Proficiency in preparing periodic updates / reports / presentation deck for both internal stakeholders and regulators
Provide timely and appropriate updates to regional and global stakeholders
escalate issues in a timely manner to senior management
Build and develop partnerships with business, IT, risk, compliance, IS, senior management staff and stakeholders
Facilitate and lead cross-functional meetings, assist in developing analytics and reporting to track effectiveness of process and identify potential process improvements
Acts as IS/Cybersecurity SME to senior stakeholders and/or other team members.
Engagement required across global & regional teams will be required to work across time zones especially NAM time zone.

Requirements:

Master’s/Bachelor’s/University degree or equivalent experience in Computer Science, Cyber Security, Computer/Information Engineering, Information Technology or a related discipline is preferred
One or more industry-recognized cybersecurity-related certifications such as CISSP, CISA, CISM, CRISC, ISO 27001
6 - 10 years or above of relevant experience in Cyber Security Management / Cyber Security Operations / Technology Risk Management / Third-party Risk Management or IT Audit, preferably with experience gained from banking / finance services industry / consultancy / control compliance or legal disciplines
Experience in assessing cyber regulatory compliance from BOT, SEC etc.
Strong understanding of International Standards/Frameworks such as: NIST, ISO 27001series, COBIT, CIS, GDPR, DORA, etc.
Proficient in interpreting and applying policies, standards and procedures
Excellent project management and organizational skills (PMP, PRINCE2, etc. is a plus)
Strong consultation, reporting writing and communication skills with highly proficiency in both spoken and written English and Thai
Thai language fluency is a must.

Nice to have:

PMP
PRINCE2

Additional Information:

Job Posted:

March 22, 2025

Employment Type:

Fulltime

Work Type:

On-site work

View All Jobs In This Company

Job Link Share:

Welcome to CrawlJobs.com –
Your Global Job Discovery Platform

At CrawlJobs.com, we simplify finding your next career opportunity by bringing job listings directly to you from all corners of the web. Using cutting-edge AI and web-crawling technologies, we gather and curate job offers from various sources across the globe, ensuring you have access to the most up-to-date job listings in one place.