Cybersecurity Policy Lead Analyst VP
- Heredia
- Permanente
- Tiempo completo
Responsibilities:
- Supports the strategy for anchoring our standards in a modern control framework, aligning requirements to Citi’s cybersecurity risk tolerance, and establishing compliance monitoring as well as consequences for noncompliance.
- Oversees the cybersecurity policy process and ensures policy owners adheres to the enterprise policies.
- Closes gaps in control coverage, defines clear, measurable, and prescriptive requirements, and aligning with Citi’s global technology and risk management policy and standard requirements, as well as Citi’s global policy governance processes.
- Establishes and maintains strong connections across the Cybersecurity organization and makes recommendations to senior leadership regarding policy and control enhancements
- Assesses information security investigation reports for accuracy, completeness, and fairness of an investigation prior to issuing disciplinary actions.
- Identifies gaps and challenges any statements or conclusions that lack clear evidentiary backing for violations against information security policies.
- Articulates the rationale and supporting evidence for disciplinary actions to senior management
- 6-10 years of relevant experience in the Information Security field
- Policy writing expertise, with the ability to present information clearly and concisely to a wide breadth of stakeholders / senior management
- Risk management experience, including regulatory assessments, audit interaction, and enterprise control frameworks
- Knowledge of industry control frameworks (e.g., CRI Profile, FFIEC CAT, NIST)
- Understanding of how investigations are conducted, including evidence collection, interview techniques, chain of custody, and forensic analysis - preferred
- Understanding of organizational risks and how investigations contribute to mitigating them.
- Ability to meticulously examine documents, data, and statements for subtle discrepancies, omissions, or inconsistencies.
- Excellent written and verbal communication skills
- Highly organized and capable of overseeing numerous endeavors
- Excels at orchestrating complex, multi-faceted projects
- Ability to motivate and manage by influence
- Self-starter who requires minimal supervision
- Results-oriented, high-energy, self-motivated
- Technical skills (e.g., system and network security, application security) preferred
- BA/BS degree or equivalent experience
- Master’s degree preferred
- Relevant certification (e.g., CISA, CISSP, CISM) preferred
- English proficiency required