Cyber Architect - SVP

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.

Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

The Cyber Architect is a senior-level CISO professional, and this position supports the Global Functions and Technology business.  The Cyber architect works as a trusted security advisor to the Application Development and Engineering teams to ensure solutions are developed in line with security requirements, architecture principals as well as policy/standards, and facilitate security-related discussions. The Cyber architect will engage with stakeholders throughout the system development lifecycle to ensure proper technology information security risk considerations are addressed at each phase of the system development life cycle and provide proactive solutions to remediate or mitigate risk. The individual should demonstrate an understanding of application security and will exercise judgment within existing practices and policies.

You will join an experienced team of IS specialists that have been tasked with performing Is assessments including threat modeling and proposing technical controls for our business-critical applications. You will work on some of the most cutting-edge technologies and provide value by solving real world problems. Your key stakeholders will be application development teams, product, the CISO, Risk and Control partners.

Excellent communication skills required in order to negotiate internally, often at a senior level. Developed communication and diplomacy skills are required in order to guide, influence and convince others, in particular colleagues in other areas and occasional external customers. Accountable for significant direct business results or authoritative advice regarding the operations of the business. Necessitates a degree of responsibility over technical strategy. Primarily affects a sub-function. Responsible for handling staff management issues, including resource management and allocation of work within the team/project.

Responsibilities:

• Provides architectural vision for all IT systems, including those that support Internet applications, ensuring that architecture conforms to enterprise blueprints.
• Develops security architecture, strategy, planning, and problem solving IT solutions including emerging technologies for processing data on prem, and cloud.
• Perform security architecture and risk assessment of internally developed, and vendor IT systems and applications leveraging best practices including threat modelling. Ensure that security design and controls are consistent with organization's security architecture principals.
• Develop strategies and security controls for above, and partner with IT architecture/development stakeholders to implement during early in system development life cycle. 
• Ensure that security architectures are resilient, reliable, and scalable.
• Provide security recommendations including automated controls, security configurations and advise on strategies as well as compensating controls to manage risk to acceptable tolerance levels.
• Perform root cause analysis, identify thematic security architecture improvements, and c