The Info Security Tech Sr Analyst is an intermediate level position responsible for leading efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.

Responsibilities:

• Assist Security Incident Response Teams with incident investigations and aid in technical risk assessments
• Coordinate with system development and infrastructure units to identify Information Security (IS) risks and the appropriate controls for development, day-to-day operation, and emerging technologies
• Perform regular assessments based on changes in the threat landscape
• Monitor vulnerability assessments and ethical hacks, ensuring that issues are addressed for the applications that they support
• Provide information security support with related activities during systems development (e.g. authentication, encryption)
• Identify and develop new and improved technical procedures and process control manuals
• Identify significant IS threats and vulnerabilities
• Assume informal/formal mentorship role within teams and assist with the coaching and training of new team members
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Qualifications:

• 5-8 years of relevant experience
• Consistently demonstrates clear and concise written and verbal communication
• Proven influencing and relationship management skills
• Proven analytical skills

Education:

• Bachelor's degree/University degree or equivalent experience

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Job Purpose / Description:

This position will be responsible for assisting in the engineering of the application connectivity through Security Operations (SECOPS) managed firewalls, the creation and management of the documentation for the connectivity in the Citi Connectivity Registry (CCR), representing the registered connectivity for approval on the Third Party Access Solutions Working Group (3PASWG) Weekly Call, and reviewing the Firewall Change Request for accuracy and compliance to support all third party connectivity. They will ensure third parties are registered in CASP (Citigroup Approved Service Providers) database and the requested applications are listed in the Citigroup Systems Inventory (CSI) or Citigroup Technology Catalog (CTC). They will confirm network connectivity by accessing network equipment and confirm configurations and status. They will work with client organizations, Helpdesk and other CT groups to ensure all firewall and ACL related troubles are corrected and documented in a timely manner. They must possess the ability to document any new policies and/or procedures into the appropriate format. They will work with other group members to ensure that the Process Control Management documentation and other documentations (drawings, databases, spreadsheets, etc.) are up to date and accurate.

Job Responsibilities:

As a member of External Connectivity Security Team (ECS) you will:

• Process Firewall, Proxy, RAS requests and perform risk assessments to ensure that the connectivity is compliant with Citi Information Security Standards and IS Policies.
• Provide Information Security oversight and guidance to Citi businesses requiring 3rd party connectivity as it relates to Citi Information Security Standards and IS Policies.
• Liaise with multiple technology teams (i.e. CATE Network Engineering; Proxy OPs and Integration; Perimeter Security Ops; System Based Computing; Remote Access Services and Business Information Security Officers); to facilitate cross functional solutions as it relates to 3rd party connectivity aligning with Citigroup Information Security Standards.
• Modality solutions include (but not limited to) RAS, B2B, Firewall; Proxy; and TPA solutions.
• Test and pilot system enhancements/changes and/or other.
• Complete all tasks - having connection with the organization's activity but not detailed in the JDs - charged by the manager or superior.

• Identify and develop new and improved technical procedures and process control manuals
• Identify significant IS threats and vulnerabilities as it relates to connectivity requests.
• Assume informal/formal mentorship role within teams and assist with the coaching and training of new team members
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Qualifications:

• Firewall Administration 1 - 3 years
• Network Administration 1 - 3 years
• TCP/IP Protocols IPSec/GRE/GETVPN Project Management 1 - 3 years
• Management of Technology Projects including Platform Migration Data Migration Network/Firewall Connectivity Windows/Unix/Linux 1 - 3 years
• Administration Security Configuration Scripting Web Services and FTP Encryption 1 - 3 years
• Encryption Algorithms Hardware Encryption (Encryptions/IPSec/GRE/GETVPN) Software Encryption (NDM/FTP/Application) VPN solutions
• Routing Configuration Access Control Lists TCP/IP Protocols IPSec/GRE/GETVPN Preferred Skills

Key Responsibilities:

• Collection of metadata, validation and registration of Firewall and Proxy rules related to migrations.
• Validating legacy connectivity for ownership, registration, and usage
• Providing support of Business requests for Changes and validation
• Completing additional tasks in connection with the role but not detailed in the current job description, charged by the direct manager, supervisor, or the functional head.

Job Family Group:
Technology

Job Family:
Information Security

Time Type:
Full time

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi") invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the "EEO is the Law" poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting

Effective November 1, 2021, Citi requires that all successful applicants for positions located in the United States or Puerto Rico be fully vaccinated against COVID-19 as a condition of employment and provide proof of such vaccination prior to commencement of employment.