Senior Business Risk Officer - Cybersecurity

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.

The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. We manage information security as an end-to-end program – one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.

This role will report to the Cybersecurity MCA Governance Manager, responsible for programs and activities related to Citi’s Transformation for the Manager’s Control Assessment (MCA) and implementation of the future-state MCA for CISO organization. This role will be dedicated on transformation efforts and high-quality implementation as well as support execution of current MCA business-as-usual (BAU) activities and implement a sustainable program that can cater to CISO/Cyber’s needs.

What you will do:

• Manage the planning, coordination, and execution of MCA Transformation program for CISO

• Lead efforts in Global Process MCA Profiles (GPMPs) and Continuous Risk Management (CRM) for CISO  

• Gain expert-level knowledge of MCA Standard, Procedure, and tools to support future-state MCA

• Help lead Citi’s Enterprise Architecture Methodology (EAM) efforts by which taxonomies and processes interlink with each other, establishing a multifaceted matrix to inform decision-making and simplification

• Support CISO Business Processes, Control Owners, and Global Assessment Unit (GAU) Owners in their responsibilities related to MCA an CRM execution

• Identify and document key controls necessary for mitigation of cybersecurity risk

• Be a hands-on Subject Matter Expert (SME) with the ability to drive problem solving and root cause analyses, simplify complex messages and summarize key points

• Foster constructive dialogue and facilitate open discussion, sharing of knowledge and experience with customers and stakeholders

• Actively manage relationships with CISO business partners and risk management teams to achieve sustained success

• Educate and train people at all levels on how to apply basic tools and methodologies to achieve improvement objectives

• Establish relationships that balance short-term gains with long-term considerations.

What we will need from you:

• Have at least 8+ years of relevant experience

• Experience in Manager’s Control Assessment (MCA), Operational Risk, Information Security, Cybersecurity, Risk Management, Governance, Risk and Control (GRC)

• Risk Management, Cybersecurity, and/or Project Management certifications are a plus (e.g. CRISC, CISA, CISM, CISSP, PMP)

• Bring creative approaches to help us drive value for clients

• Ability to influence decisions with senior leadership and business partners when confronted with differing opinions on information security risks

• Proficiency with Microsoft Office, advanced Excel skills (e.g. macros, pivots, complex formulas)

• Knowledge of data visualization/analytics business applications such as Tableau, QlikView, and Microsoft Power BI

• Familiarity with Machine Learning and Artificial Intelligence (AI) is a plus

• Fluent in English (ability to read, write, and speak)

What we can offer:

By joining Citi Hungary, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive compensation package and enjoy a whole host of additional benefits that support you (and your family) to be well, live well and save well:

• Cafeteria Program

• Home Office Allowance (for colleagues working in hybrid work models)