Business Risk Senior Analyst

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.

About Our Team:

The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients', our revenue, our employees and our proprietary data. We manage information security as one end-to end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.

This role will report to the Cybersecurity the Manager’s Control Assessment (MCA) Manager, responsible for programs and activities related to Citi’s Transformation for MCA and implementation of the future-state MCA for CISO organization. This role will be dedicated on transformation efforts and high-quality implementation as well as support execution of current MCA business-as-usual (BAU) activities and implement a sustainable program that can cater to CISO/Cyber’s needs.

Your responsibilities will be:

• Manage the planning, coordination, and execution of MCA Transformation program for CISO

• Support efforts in Global Process MCA Profiles (GPMPs) and Continuous Risk Management (CRM) for CISO  

• Gain deep knowledge of MCA’s Standard, Procedure, and tools to support future-state MCA

• Support Citi’s Enterprise Architecture Methodology (EAM) efforts by which taxonomies and processes interlink with each other, establishing a multifaceted matrix to inform decision-making and simplification

• Support CISO Business Processes, Control Owners, and Global Assessment Unit (GAU) Owners in their responsibilities related to MCA and CRM execution

• Identify and document key controls necessary for mitigation of cybersecurity risk

• Be a hands-on Subject Matter Expert (SME) with the ability to drive problem solving and root cause analyses, simplify complex messages and summarize key points

• Foster constructive dialogue and facilitate open discussion, sharing of knowledge and experience with customers and stakeholders

• Actively manage relationships with CISO business partners and risk management teams to achieve sustained success

• Educate and train people at all levels on how to apply basic tools and methodologies to achieve improvement objectives

• Establish relationships that balance short-term gains with long-term considerations

What we will need from you:

• 5+ years of experience in Manager’s Control Assessment (MCA), Operational Risk, Information Security, Cybersecurity, Risk Management, Governance, Risk and Control (GRC)

• Risk Management, Cybersecurity, and/or Project Management certifications are a plus (e.g. CRISC, CISA, CISM, CISSP, PMP)

• Familiarity with data visualization/analytics business applications such as Tableau, QlikView, and Microsoft Power BI

• Familiarity with Machine Learning and Artificial Intelligence (AI) is a plus

• Fluent in English (ability to read, write, and speak)

• Bring creative approaches to help us drive value for clients

• Ability to influence decisions with senior leadership and business partners when confronted with differing opinions on information security risks

What we can offer:

By joining Citi Hungary, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive compensation package and enjoy a whole host of additional benefits that support you (and your family) to be well, live well and save well:

• Cafeteria Program

• Home Office Allowance (for colleagues working in hybrid work models)

• Paid Parental Leave Program (maternity and paternity leave)

• Private Medical Care Program and onsite medical rooms at our offices

• Pension Plan Contribution to voluntary pension fund

• Group Life Insurance