rohq - ciso - is risk governance analyst - c12/avpCitigroup

The Regional IS Hub - IS Risk governance analyst is to provide data analysis in partnership with the IS Utility function and perform review on security risk issues, remediation plans, security incident details to identify thematic or systematic risk areas across region/countries /sectors/functions. The IS risk governance analyst recommend appropriate remediation measures to mitigate the risks or support management in influencing the right decisions by providing appropriate risk reduction proposals.
Reports to Regional IS Hub Lead - IS Risk Governance
Key Responsibilities
Perform IS thematic reviews on security risk issues, remediation plans, security incident details, and provide recommendations to manage information security risk, issue and opportunity (RIO) management
Understand current system, tool and processes to managing IS risk issues, exceptions and remediation plans; identify opportunities for improvement and propose enhancements required and see through to implementation.
Serve as a trusted internal Information Security Advisor to the IS policies, risk issue management process and thematic risk assessment to Country, Region, Function and Sectors.
Key Activities
Perform data analysis to existing and emerging IS and Cybersecurity risks to proactively deliver insights about thematic or systematic risk areas across region/countries /sectors/functions
Provide IS risk issues trends and drive the discussion about improvement areas, recommendations as well as action ownership.
Coordinate periodical meeting with related IS leads and stakeholders to agree focused risk area for thematic risk analysis.
Cooperate with related stakeholders deep dive review to left shift risk reduction opportunities where available, explore possible solutions and provide collective risk visibility to related lines of business and/or countries.
Collaborate with ISU, O&T risk and control functions, within CISO organization and other related stakeholders to improve the IS risk management process and systems.
Track and monitor implementation of recommendations
Qualifications
Bachelor or above degree on information security /IT security related.
Must have at least 7 years information security risk management related experience. Should have at least 4 years' experience in working with multinational companies with demonstrated ability to effectively interact in the region.
Should have relevant certifications like CISA, CISSP, or CISM.
Excellent written and verbal communication in English
Strong critical thinking and analytical skills
Self-motivated and able to work independently with minimal supervision in a fast-paced environment and with tight schedules.
Ability to manage multiple high-priority projects simultaneously
Shown ability to work both independently and reciprocally with numerous people at all levels throughout a large organization
Job Family Group: Technology
Job Family: Information Security
Time Type:
Citi is an equal opportunity and affirmative action employer.
Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Citigroup Inc. and its subsidiaries ("Citi") invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review .
View the " " poster. View the .
View the .
View the
Citigroup

Taguig City, Metro Manila
Permanent
Full-time