Vice President, Global Markets ISO (Information Security Officer)

Job Description – Global Markets ISO

Overview of the Chief Information Security Office (CISO):

The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients', our revenue, our employees and our proprietary data. We manage information security as one end-to end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.

Overview of the Role:

This ISO role (Information Security Officer- Markets, Vice President), is an intermediate level position within Citi’s CISO (Chief Information Security Office) organization. This role is responsible for driving efforts to prevent, monitor and respond to Information Security breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and control programs in alignment with Citi’s Information & Cybersecurity policy.

ISO will act as Cybersecurity subject matter experts for the responsible Business (including Markets Trading, Operations & Technology) for all Information security activities including but not limited to oversight and management of the IS/Cyber risks at the individual business level as well as wider Citi/CISO level. The ISO will work closely with Markets Sr. ISOs and the overall CISO community of ISOs, Cybersecurity Architects, Cyber Risk Analysts, to oversee and monitor adherence with Citi IS/Cybersecurity Policy and Standards, manage risks & non-compliances and provide advisory on Information & Cybersecurity matters to stakeholders.

Key Responsibilities:

• Act as a Trusted Security Advisor to business and technology teams, guiding them on IS/Cyber risks.
• Appropriately assess risks when business decisions are made, demonstrating consideration for the firm's reputation and safeguarding Citigroup, its clients and assets.
• Drive compliance with applicable Information & Cybersecurity laws, rules and regulations, adhering to relevant Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.
• Work with business & technology management to drive the information security program and govern risk management activities including CSRA (Cybersecurity Risk Appetite) reporting.
• Work with the internal Applications Development function to facilitate improvements in both architectural and application security posture.
• Provide strategic risk guidance for business and technology projects, including the evaluation and recommendation of security controls and corrective actions to mitigate/remediate risks.
• Manage security incidents and events to protect corporate IT assets, including intellectual property, regulated data and the company's reputation.
• Facilitate compliance with all Information Security policies, standards and regulations/directives as mandated by Global CISO Organization and regulators.
• Perform Information Security Assessments across applications/business processes. Ensure non-compliant items are resolved through coordination with Business & Technology Management.
• Communicate and interact periodically with employees, business and technology management to update on IS related programs, risks & controls, policies/standards.