דרושים Assistant Vice President Cloud Security Threat Modeler ב-Citi Group ב-United States, Houston

Key Responsibilities:

• Collaborate closely with Execution Partners to facilitate the execution of high-priority initiatives – ensuring that sufficient coverage and support is provided across the end-to-end delivery

• Manage and execute smaller-scale projects independently, ensuring alignment with broader strategic goals

• Develop and maintain detailed project plans, track milestones, and manage delivery timelines for assigned initiatives

• Identify and escalate risks, issues, and dependencies, proposing mitigation strategies as needed

• Support the establishment and maintenance of initiative level governance processes, including preparing status reports and facilitating project meetings

• Coordinate cross-functional teams to ensure clarity of objectives, roles, and deliverables

• Support stakeholder communication by developing clear, concise updates and presentations for senior leadership.

• Contribute to continuous improvement efforts in execution standards, tools, and methodologies

• Maintain a strong understanding of regulatory requirements impacting the business and incorporate them into project planning and execution

Qualifications:

• 7+ years of experience in program management, project delivery, regulatory remediation, or a related field

• Proficient knowledge of Wholesale Credit Risk would be advantageous

• Advanced Microsoft Office (Word, Excel, and PowerPoint) skills

• Demonstrated ability to manage end-to-end project delivery across multiple stakeholders

• Familiarity with regulatory environments and compliance initiatives, preferably within financial services

• Strong organizational, analytical, and problem-solving skills

• Excellent written and verbal communication skills, with experience preparing materials for executive audiences

• Ability to work independently and collaboratively in a fast-paced, matrixed environment

• Relevant certifications (e.g., PMP, PRINCE2, Agile certifications) are a plus

Competencies:

• Project Planning and Execution

• Risk and Issue Identification and Management

• Stakeholder Collaboration and Communication

• Delivery-Focused Mindset

• Problem Solving and Adaptability

• Attention to Detail and Quality

• Proactive Ownership and Accountability

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Anticipated Posting Close Date:

Responsibilities:

• The Structurer will hold a key role including pricing, developing innovative physical and financial products
• Assesses the adequacy of underwriting, portfolio management, collateral evaluation, and the reliability of asset classifications and risk rating by conducting individual credit reviews
• Assesses effectiveness of credit risk management at Citi and the ability of the Business and Independent Risk to identify, monitor and mitigate current and emerging credit risks across Citigroup and Citibank
• Prepares reports on the overall quality of the portfolios reviewed, including assessment of monitoring and proper risk grading
• Provides analytical aid for the team including responsibility for portfolio performance analysis and reporting
• Participate to the pre-trade & post-sales effort, closely working with sales
• Participate to the development of new products
• Marketing presentations and participation to client meetings
• Work in close partnership with control functions such as Legal, Compliance, Market and Credit Risk, Audit, Finance in order to ensure appropriate governance and control infrastructure
• Build a culture of responsible finance, good governance and supervision, expense discipline and ethics
• Appropriately assess risk/reward of transactions when making business decisions; and ensure that all team members understand the need to do the same, demonstrating proper consideration for the firm’s reputation
• Be familiar with and adhere to Citi’s Code of Conduct and the Plan of Supervision for Global Markets and Securities Services; and ensure that all team members understand the need to do the same
• Adhere to all policies and procedures as defined by your role which will be communicated to you
• Obtain and maintain all registrations/licenses which are required for your role, within the appropriate timeframe
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Qualifications:

• 6-10 years structuring experience from a financial institution
• Demonstrated quantitative and analytical skills
• Consistently demonstrates clear and concise written and verbal communication skills
• Ability to work with multiple functional groups in a cohesive manner.

Education:

• Bachelor’s/University degree, Master’s degree preferred

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Anticipated Posting Close Date:

View the " " poster. View the .

View the .

View the

Product developer responsible for coordination amongst front office teams working on new business development initiatives. Creates a product vision aligned to business priorities and corresponding roadmap to delivery.

Responsibilities:

• The Product Developer is responsible for all activities related to the development of new products and/or features and functionality of products including developing business cases, requirements definition (BRDs), product enhancements innovation, feature and functionality definition based on market and industry research and trends and client needs. This role manages the end-to-end product development lifecycle and will also scope product releases, agreeing to and tracking business priorities, incorporating regulatory and compliance requirements and investment tracking
• Creates a product vision aligned to business priorities and corresponding roadmap to delivery
• Follows market, industry and client trends to own field and adapts them for application Citi’s products and solutions platforms
• Conceptualizes, plans, prioritizes, coordinates design and delivery of products or features to product release, and serves as product ambassador within user community
• Works in close co-ordination with Sales, Trading, Technology, MQA, Market risk, Business Managers and senior stakeholders to fulfil the delivery objectives
• Has responsibility to deliver significant direct business results and authoritative advice regarding product development that necessitates a degree of responsibility over technical strategy
• Partners with senior business leaders and a widely distributed global user community to define and implement solutions
• Creates clear and specific project plans, business and technical requirements documents for product execution
• Has direct interaction with trading, sales, MQA, business managers and technology teams, to understand their long-term vision, discuss industry trends, and incorporate them into the product & solutions strategy

Qualifications:

• 3-8 years structuring experience from a financial institution
• Demonstrated quantitative and analytical skills
• Consistently demonstrates clear and concise written and verbal communication skills
• Ability to work with multiple functional groups in a cohesive manner.

Education:

• Bachelor’s/University degree, Master’s degree preferred

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Anticipated Posting Close Date:

View the " " poster. View the .

View the .

View the

Responsibilities

• Perform data analysis from multiple systems and assess completeness of data for reporting
• Work with the Metrics reporting team to enhance and refine the metrics and key performance indicators reported to senior management and external regulatory agencies
• Analyze and report aggregated data from multiple data sources
• Develop data visualization mock-ups for monitoring program data trends and communicate using analytical tools
• Design and implement a solution for performance measurements on effectiveness of controls and overall vulnerability assessment program
• Document data extraction and transformation rules to integrate new sources of data into a data warehouse
• Analyze trends on assets security health posture and report using visualization tools for program review with management and stakeholders
• Develop reports for tracking program effectiveness and update power point deck for weekly , monthly and quarterly updates
• Provide timely, accurate, and actionable reporting on application vulnerability activity, trends, service levels, and areas of concern to senior management
• Develop, optimize and provide continuous support for reports and ad-hoc queries from end user
• Create dashboards with parameters and interactive drill down functionality
• Analyze trends on assets security health posture and report using visualization tools for program review with management and stakeholders
• Streamline and automate report creation and distribution for weekly & monthly reporting
• Develop User acceptance test plans for testing changes to system enhancements that impact governance and compliance
• Document business requirements related to system enhancements and submit for reviews and approvals
• Ensure data integrity and compliance by performing data audits and data validation
• Performs root cause analysis on metric trends and provide insight to governance team for appropriate refinements to rules

Qualifications

• 7+ years' experience of strong data analysis and report development working with BI tools (Cognos, Tableau, etc.) on relational databases (Oracle, SQL Server, Microsoft Access)
• Excellent Excel data analysis and Access database skills
• Excellent SQL Skills
• Strong BI development skills
• Strong understanding of application development life cycle, CI/CD and DevOps concepts
• Excellent Analytical Ability to understand the systems and data flow at a high level to evaluate if appropriate controls are in place for the standards
• Experience with issue resolution with proven ability to research, identify and communicate solutions
• Excellent documentation skills to collect, summarize and synthesize information in an auditable format
• Excellent organization and multi-tasking skills
• Proven influencing and relationship management skills
• Relevant experience in Information Security and/or Application Security is highly preferred

Education

• Bachelor’s degree/University degree or equivalent experience
• Master’s degree preferred

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Anticipated Posting Close Date:

• Understand engineering needs including those required to build, maintain, and operate the system through all phases of its life
• Understanding of information modeling, data structures and algorithms
• Participate in the front-end development for one or more products and collaborate with visual/interaction designers, other engineers, and product managers to launch new products, iterate on existing features, and build a world-class user experience
• Incorporate testing and instrumentation into your development workflow to ensure a product is reliable and measurable
• Create and maintain continuous integration and deployment processes
• Create and maintain tools for code quality control: code review, testing, coverage, monitoring, notification
• Understand maintenance characteristics, runtime properties and dependencies that exist in support of your system’s software. These dependencies will include but not limited to hardware, platform, operating system, performance and load requirements, as well as contingencies with upstream and downstream systems.

• 10+ years of hands-on experience developing and engineering software and consumer-facing applications.
• 7+ years of experience developing and scaling JAVA REST services using frameworks such as Spring.
• Experience in modern microservices architectures and deployments.
• Expert-level proficiency in designing and implementing cloud infrastructure (AWS and/or GCP) utilizing Terraform for infrastructure as code (IaC).
• 5+ years of experience working in a distributed, cloud-based environment using Azure/AWS/GCP (Docker/Kubernetes).
• Experience with cloud infrastructure and data services (compute, storage, networking, etc.).
• Experience working with cloud-based relational and NoSQL databases.
• Experience with Test Driven Development (TDD) and test automation using unit testing and behavioral testing frameworks.
• Experience as an AWS Solutions Architect, Cloud Security Certification, and/or OpenStack Administrator Certification is a plus (other cloud-related certifications also a plus).
• Experience with modern SDLC tools, branching strategies, and the ability to develop and enforce CI/CD practices.
• Experience with developing resilient and scalable applications.
• Familiarity with DevOps and SRE practices such as monitoring, alerting, and incident management.
• Familiarity with Domain Driven Design and Event Driven Architectures.
• Strong analytical skills.
• Strong willingness to learn and adapt to new technologies and connect with colleagues from around the world.

• Bachelor's degree or equivalent experience

Anticipated Posting Close Date:

• Understand engineering needs including those required to build, maintain, and operate the system through all phases of its life
• Understanding of information modeling, data structures and algorithms
• Participate in the front-end development for one or more products and collaborate with visual/interaction designers, other engineers, and product managers to launch new products, iterate on existing features, and build a world-class user experience
• Incorporate testing and instrumentation into your development workflow to ensure a product is reliable and measurable
• Create and maintain continuous integration and deployment processes
• Create and maintain tools for code quality control: code review, testing, coverage, monitoring, notification
• Understand maintenance characteristics, runtime properties and dependencies that exist in support of your system’s software. These dependencies will include but not limited to hardware, platform, operating system, performance and load requirements, as well as contingencies with upstream and downstream systems.

• 10+ years of hands-on experience developing and engineering software and consumer-facing applications.
• 7+ years of experience developing and scaling JAVA REST services using frameworks such as Spring.
• Experience in modern microservices architectures and deployments.
• Expert-level proficiency in designing and implementing cloud infrastructure (AWS and/or GCP) utilizing Terraform for infrastructure as code (IaC).
• 5+ years of experience working in a distributed, cloud-based environment using Azure/AWS/GCP (Docker/Kubernetes).
• Experience with cloud infrastructure and data services (compute, storage, networking, etc.).
• Experience working with cloud-based relational and NoSQL databases.
• Experience with Test Driven Development (TDD) and test automation using unit testing and behavioral testing frameworks.
• Experience as an AWS Solutions Architect, Cloud Security Certification, and/or OpenStack Administrator Certification is a plus (other cloud-related certifications also a plus).
• Experience with modern SDLC tools, branching strategies, and the ability to develop and enforce CI/CD practices.
• Experience with developing resilient and scalable applications.
• Familiarity with DevOps and SRE practices such as monitoring, alerting, and incident management.
• Familiarity with Domain Driven Design and Event Driven Architectures.
• Strong analytical skills.
• Strong willingness to learn and adapt to new technologies and connect with colleagues from around the world.

• Bachelor's degree or equivalent experience

Anticipated Posting Close Date:

The Role:

Citi is looking for a security focused person with a good understanding of cybersecurity principles to work in the Cloud Threat Modeling team. Using threat modeling you will identify threats and specify mitigating controls which will directly reduce the risk of Citi operating in the public cloud.

Responsibilities

• Perform Threat Modeling using a documented process
• Development of automation tools as required
• Maintain a high standard of work in identifying threats and specifying mitigating controls
• Attending to the lifecycle of identified threats and controls
• Delivery of threat models and supporting tasks within existing timeframes
• Provide feedback, support, and improvements to the existing threat modeling process
• Present work to seniors, the team, and other technical teams

Qualifications

The ideal candidate is expected to have at least1-2 years’experience inseveralof the following technologies/processes:

• Jira or other ticketing systems – must
• Experience working in a cyber-security role – must
• Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation – must
• Experience with Infrastructure as Code (Terraform, CloudFormation)
• Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck)
• Identifying vulnerabilities using CWE or OWASP
• Operating systems and their hardening
• Development concepts (such as: CICD, Pipelines, SDLC)
• Cloud Development Kit (CDK), GitOps
• Operating in a DevOps / agile team structure
• Understanding of docker/K8S/serverless/helm
• Support or perform pen testing
• Snowflake/MongoDB/Terraform Cloud/GitHub/Databricks
• Design and review technical architectures
• Analytical, diligence and attention to detail
• Eagerness to research using vendor documentation
• Create and maintain quality documentation
• Experience of regulated environment
• Adversary mindset
• Work with diverse set of people and teams
• Constant learner of new technologies and methodologies
• Relationship building across multiple cross-functional teams

Education

• Bachelor's degree in computer related field or equivalent work experience

• Ideal candidate is expected to have afoundationalorpractitionerlevel cloud certification from either AWS, GCP or Azure
• Ideal candidate is also expected to have a foundational cyber-security certification (defined below):

Foundational or practitioner level cloud certification

• AWS Certified Cloud Practitioner
• CompTIA Cloud Essentials+, CompTIA Network+
• Google Cloud Digital Leader
• Oracle Cloud Infrastructure Foundations Certified Associate
• Microsoft Certified: Azure Fundamentals

Foundational cyber-security certification

• ISACA Cybersecurity Fundamentals
• GIAC Information Security Fundamentals (GISF)
• Associate of ISC2
• CompTIA Security+
• Microsoft Certified: Security, Compliance, and Identity Fundamentals

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

• Experience developing automation scripts – must
• Experience developing a software application using SDLC

Anticipated Posting Close Date:

View the " " poster. View the .

View the .

View the