Citi Group Cyber Manager 's Control Assessment MCA Lead Analyst 

Hungary 

40402160

is responsible for providing governance, oversight, risk management, and strategic planning for CISO; as well as Third Party Information Security Assessments (TPISA). The team is also responsible for CISO Program and Performance Management including oversight of CISO’s book of work, maintaining a CISO strategy aligned with industry and regulatory requirements, and CISO’s performance management processes to ensure key IS metrics are in place to determine compliance with Citi’s standards. In addition, the team is responsible for the governance and oversight of Risk Management programs across CISO.

What you will do:

• Manage the plan​ning, coordination, and execution of MCA Transformation program for CISO

• Drive MCA best practices, transformation, and execution consistency across business/functions

• Lead efforts in Global Process MCA Profiles (GPMPs) and Continuous Risk Management (CRM) for CISO

• Gain expert-level knowledge of MCA Standard, Procedure, and tools to support future-state MCA

• Support CISO Business Processes, Control Owners, and Global Assessment Unit (GAU) Owners in their responsibilities related to MCA execution

• Identify and document key controls necessary for mitigation of cybersecurity risk

• Be a hands-on Subject Matter Expert (SME) with the ability to drive problem solving and root cause analyses, simplify complex messages and summarize key points

• Partner with CISO’s Enterprise Architecture Methodology (EAM) Lead team by which taxonomies and processes interlink with each other, establishing a multifaceted matrix to inform decision-making and simplification

• Foster constructive dialogue and facilitate open discussion, sharing of knowledge and experience with customers and stakeholders

• Actively manage relationships with CISO business partners and risk management teams to achieve sustained success

• Educate and train people at all levels on how to apply basic tools and methodologies to achieve improvement objectives

• Establish relationships that balance short-term gains with long-term considerations.

Your profile:

• Have at least 8+ years of relevant experience

• Experience in Manager’s Control Assessment (MCA), Operational Risk, Information Security, Cybersecurity, Risk Management, and/or Governance, Risk and Control (GRC)

• Risk Management, Cybersecurity, and/or Project Management certifications are a plus (e.g. CRISC, CISA, CISM, CISSP, PMP)

• Proven experience in implementing sustainable solutions and improving processes

• Bring creative approaches to help us drive value for clients

• Ability to influence decisions with senior leadership and business partners when confronted with differing opinions on information security risks

• Proficiency with Microsoft Office, advanced Excel skills (e.g. macros, pivots, complex formulas)

• Knowledge of data visualization/analytics business applications such as Tableau, QlikView, and Microsoft Power BI

• Familiarity with Machine Learning and Artificial Intelligence (AI) is a plus

• Fluent in English (ability to read, write, and speak)

By joining Citi Hungary, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive compensation package and enjoy a whole host of additional benefits that support you (and your family) to be well, live well and save well:

• Cafeteria Program

• Home Office Allowance (for colleagues working in hybrid work models)

• Paid Parental Leave Program (maternity and paternity leave)

• Private Medical Care Program and onsite medical rooms at our offices

• Pension Plan Contribution to voluntary pension fund

• Group Life Insurance

• Employee Assistance Program

• Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed

• Flexible work arrangements to support you in managing work - life balance

• Career progression opportunities across geographies and business lines

• Socially active employee communities with diverse networking opportunities

Time Type: