ISO Lead Analyst - Vice President

As a senior Information Security professional at Citi, your role involves driving efforts to support governance, risk, and compliance for the Chief Information Security Officer (CISO). You will ensure the execution of Information Security directives aligned with Citi's cyber and information security policy and regulatory requirements. Your position is part of the Cyber Governance, Control, and Policy Team. Key Responsibilities: - Manage and validate deliverables of all Information Security (IS) programs, ensuring closure per agreed timelines and goals - Engage with APAC regulators on IS related matters - Manage regulatory exams and internal & external audits - Collaborate with Global & Regional Information Security teams to enhance processes, reduce risks, and support IS regulatory activities - Coordinate cyber-attack simulations, penetration testing, vulnerability assessments, and oversee mitigation/remediation action plans - Accountable for delivering remediation from regulatory assessments - Prepare periodic updates, reports, and presentations for stakeholders and regulators - Provide timely updates to regional and global stakeholders, escalating issues to senior management as necessary - Build partnerships with various business functions and stakeholders - Facilitate cross-functional meetings, develop analytics, and track process effectiveness Qualifications: - 8-10 years of experience in Cyber Security Governance & Risk & Control, Cyber Security Operations, Technology Risk Management, or IT Audit - Experience in assessing cyber regulatory compliance - Professional certifications such as CISSP, CRISC, CISM, CISA, or equivalent - Strong understanding of International Standards/Frameworks (NIST, ISO 27001, COBIT, CIS, GDPR, DORA) - Proficiency in interpreting and applying policies, standards, and procedures - Excellent project management, organizational, collaboration, reporting writing, and communication skills - Bachelor's degree or equivalent experience in Computer Science, Cyber Security, or related discipline preferred Please note that this job description is a high-level overview of the responsibilities. Additional duties may be assigned as needed.,