Network security - Security Analysis Specialist

Position Tasks:

• Support Information Security Risk Assessments
  1. Registration of application assets in Risk Assessment Inventory
  2. Information Technology Risk Classification
  3. Coordination of discussions, reviews and approvals from Technology and Business stakeholders 
• Management of risks related to Third party mgmt. –
  1. Support business partners in due diligence of new and existing third-party vendors
  2. Review gaps identified during assessments
  3. Facilitate risk reduction discussions and assessment of residual risk for further documentation of corrective action plans and risk acceptances
• Periodic review of External data transfers and their compliance with Citi standards
• Documentation of non-compliances in the Issue Management tools –
  1. Data gathering from Tech, Business and IS partners
  2. Raising control issues for Non compliances with Citi policy/standards
  3. Facilitating discussions for residual risk rating, Reviews with control functions & Approvals as per approval matrix
  4. Facilitate periodic review and renewal of Risk Exceptions.
• Follow-up on Regional Security Incidents with involved parties for timely closure. Support periodic Data gathering and Root Cause analysis of security incidents. Monitor improvements based on measures taken.
• Support time sensitive global IS risk reduction initiatives by partnering with regional and country business partners
• Prepare Management reports, presentations, dashboards for key risk indicators
• Support appropriate data classification for application and infrastructure assets
• Occasional Audit support
   

Tool familiarity, soft skills and other qualifications:

• Essential: Intermediate to advanced knowledge of Information Security; Project Mgmt skills; Strong communication skills; MS Office - Access, Excel, Visio, Powerpoint
• Desirable: Experience with migration projects; Any InfoSec related certification; MS Project

#LI-APJ