Coordinate application testing efforts that support protecting the confidentiality, integrity, and availability of business information that are stored and processed
Educate and advise business and technical leaders on the development, delivery and management of security solutions
Define and implement security policies and standards, and provide periodic Information Security (IS) management reports
Provide security oversight for major system designs and monitor the implementation of approved Corrective Action Plans
Plan and implement IS administration for Information Technology (IT) projects, and plan short to medium term IS actions and resources
Contribute to the evaluation and selection of applications and systems, focusing on IS implications
Manage a large/complex team or multiple teams, including the people, budget, policy formation, and strategy planning
Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards.
Qualifications:
10+ years of relevant experience
Proven experience with Databases preferred
Additional technical certifications preferred
Advanced analytical and problem solving skills
Consistently demonstrates clear and concise written and verbal communication
Proficient in interpreting and applying policies, standards and procedures
Demonstrated ability to remain unbiased in a diverse working environment
Education:
Bachelor’s degree/University degree or equivalent experience
Master’s degree preferred
Conocimiento detallado de Regulación de Sistemas de Pagos Banco de México -BANXICO- (13/2017): SPEI (14/2017) / SPID (4/2016) / BDT (Reglas Conjuntas BANXICO-CNBV-SHCP) / SIBUC (9/2023) Interacción con reguladores Conocimiento avanzado de controles Information Security y Cybersecurity (ISO 27002, ISO 27032, NIST)
Habilidades de identificación y gestión de riesgos de Information Security y Cybersecurity
Inglés fluido
Soft skills: Liderazgo, trabajo en equipo / colaboración, escucha activa, negociación, resiliencia, adaptabilidad Manejo de situaciones difíciles y tensas
Certificaciones relevantes deseables en Information Security: CISM, CRISC, CISA, CISSP