Cyber Information Security Officer (ISO)

We are seeking a technically proficient Cyber Information Security Officer (ISO) to help shape and embed security practices across our Client organization. The role supports both business and technology teams in identifying, assessing, and mitigating cyber risks to prevent, monitor and respond to information / data breaches and cyber-attacks. The Cyber ISO is a senior level professional position requiring the ability to work closely with technical stakeholders to inform design decisions and ensure alignment with security expectations. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.

Responsibilities :

Identify opportunities to automate and standardize information security controls and for the supported groups

Support technical and business teams to resolve any vulnerabilities or issues detected in an application or infrastructure

Act as a trusted advisor to business and technology teams, providing pragmatic guidance on cybersecurity risks, controls, and requirements.

Translate technical security concepts into business-relevant language to inform leadership decisions and drive action.

Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions

Direct the development and delivery of secure solutions by coordinating with business and technical contacts

Participate in information security assessments across applications, infrastructure, and business processes, ensuring that non-compliant items are addressed in coordination with relevant stakeholders.

Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Contribute to the growth of less technical colleagues through knowledge-sharing, contextual guidance, and translating complex security concepts into practical understanding.

Job Functions :

The Cyber Information Security Officer is responsible for providing expert Cyber Security support and leadership to the Client organization.

This position will provide consistent Cyber Security guidance to various business teams on the Citi Information Security Cyber security policies, procedures, and standards.

The Cyber Information Security Officer will provide operational support, intelligence gathering, project and program management, analysis and report development, publishing, and briefing to Senior business leadership and Cyber Security leadership.

This position will require substantial collaboration with business and Cyber Security professionals ensuring timely and appropriate Cyber security support for your assigned business area.

Day-to-Day tasks will be providing direction with business leaders on the requirements for brand protection, email security, project security, application security, vulnerability assessments, and other programs to address regulatory and statutory requirements for Citi and our business partners. You will be responsible for interactions with partners, third party vendors, employees, and a variety of internal and external stakeholders that require the team’s services.

Besides managing aspects of the day-to-day function of these programs, you will partner with a variety of cyber and information security teams internal and external to enhance current solutions and find new solutions to stay ahead of the ever-changing cyber threat.

Qualifications :

6-10 years of relevant experience

Advanced proficiency with Microsoft Office tools and software

Consistently demonstrates clear and concise written and verbal communication

Established influencing and relationship management capabilities that contribute to strategic alignment and execution

Proven analytical skills and a strong sense of curiosity, with the ability to uncover the root causes and understand the true nature of complex security and risk issues

Familiarity with enterprise technologies including cloud platforms, APIs, identity management, and data protection practices.

Demonstrated knowledge of secure design principles and security frameworks.

Education :

Bachelor’s degree / University degree or equivalent experience

Master’s degree preferred

Professional certifications such as CISSP, CISM, CCSP, or SABSA preferred.

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

By joining Citi Solutions Center Poland, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive base salary (which is annually reviewed) and enjoy a whole host of additional benefits such as :

Private Medical Care Program

Life Insurance Program

Pension Plan contribution (PPE Program)

Employee Assistance Program

Paid Parental Leave Program (maternity and paternity leave)

Sport Card

Holidays Allowance

Sport and team recreation activities

Special offers and discounts for employees

Access to an array of learning and development resources

A discretional annual performance related bonus

A chance to make a difference with various affinity networks and charity initiatives

Alongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self every day. We want the best talent around the world to be energized to join us, motivated to stay, and empowered to thrive.

Sounds like Citi has everything you need? Then apply to discover the true extent of your capabilities.

Job Family Group : Technology

Job Family : Information Security

Time Type : Full time

Most Relevant Skills

Please see the requirements listed above.

Other Relevant Skills

For complementary skills, please see above and / or contact the recruiter.