The Info Sec Engineering Lead Analyst - Mainframe Data Protection, is a senior level professional position responsible of support the security applications under its control. The overall objective of this role is to support the cryptographic solutions on TANDEM and UNISYS mainframe, driving efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The role is in charge to execute the secure software development life cycle watching information security directives and activities in alignment with Citi's security policy.

Info Sec Engineering Lead Analyst - Mainframe Data Protection is responsible of provide cryptographic solutions for financial data protection using strong solutions based in HSM ATALLAS and/or THALES for mainframe applications, Also has the roles of Application Manager to provide support for proprietary developments in TANDEM and Product Owner of crypto solutions for transport and storage protection.

Responsibilities:

• Develop enhancements and maintenance upgrades of assigned applications on mainframe platforms.
• Identify opportunities to automate and standardize information security controls and for the supported groups
• Resolve any vulnerabilities or issues detected in an application or infrastructure
• Analyze source code to mitigate identified weaknesses and vulnerabilities within the system
• Review and validate automated testing results and prioritize actions that resolve issues based on overall risk
• Scan and analyze applications with automated tools, and perform manual testing if necessary
• Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions
• Direct the development and delivery of secure solutions by coordinating with business and technical contacts
• Serve as a technology subject matter expert for internal and external stakeholders and provide direction for all firm mandated controls and compliance initiatives, all projects within the group and in creating a technology domain roadmap
• Define necessary system enhancements to deploy new products and process enhancements
• Recommend product customization for system integration
• Identify problem causality, business impact and root causes
• Exhibit knowledge of how own specialty area contributes to the business and apply knowledge of competitors, products and services
• Advise or mentor junior team members
• Impact the engineering function by influencing decisions through advice, counsel or facilitating services
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Qualifications:

• Relevant experience in security solutions.
• Experience in specialized security appliance HSM
• Consistently demonstrates clear and concise written and verbal communication
• Proven influencing and relationship management skills
• Proven analytical skills
• Consistently demonstrates clear and concise written and verbal communication
• Comprehensive knowledge of design metrics, analytics tools, benchmarking activities and related reporting to identify best practices
• Ability to work in a matrix environment and partner with virtual teams
• Ability to work independently, multi-task, and take ownership of various parts of a project or initiative
• Ability to work under pressure and manage to tight deadlines or unexpected changes in expectations or requirements
• Proven track record of operational process changes and improvement

Education:

• Bachelor's degree/University degree or equivalent experience
• Master's degree preferred

This role is for leading a variety of engineering activities including the design, acquisition and deployment of hardware, software and network infrastructure in coordination with the Technology team, ensuring quality standards are being met within existing and planned framework.

Specific Responsibilities:

• Provide Level 2 and Level 3 engineering support for assigned systems
• Coordinate scheduled application changes to comply with standards of Citi and risk & control requirements.
• Identify, develop and implement technology improvements for assigned applications and ensure alignment with Citi information security standards.
• Support business and security operational teams during any routine or crital-troubleshooting event.
• Evaluate new technologies to provide recommendations to simplify system complexity and reduce costs.
• Coordinate technology development teams to ensure alignment with Citi's software development lifecycle.
• Resolve any vulnerabilities or issues detected in an application, infrastructure, or process.
• Analyze source code to mitigate identified weaknesses and vulnerabilities within the system.
• Encryption devices knowledge to operate, management services, according the engineering and business necessities and the security elements storage.

Specific Qualifications:

• Verifiable experience in security systems or formal qualifications information security.
• Certification or verifiable experience in management of HSM preferable ATALLAS and THALES.
• Experience working in financial institution knowledge in PCI policies and standards.
• Experience in TANDEM Non Stop technologies.
• Experience in UNISYS MCP desirable.
• strong knowledge in COBOL/ALGOL/TACL mainframe legacy coding
• Experience developing in C/C++
• JAVA and Web Services knowledge desirable.
• Consistently demonstrates clear and concise written and verbal communication (English desirable)
• Comprehensive knowledge of design metrics, analytics tools, benchmarking activities and related reporting to identify best practices
• Demonstrated analytic/diagnostic skills
• Ability to work in a matrix environment and partner with virtual teams
• Ability to work independently, multi-task, and take ownership of various parts of a project or initiative
• Ability to work under pressure and manage to tight deadlines or unexpected changes in expectations or requirements

Job Family Group:
Technology

Job Family:
Information Security

Time Type:
Part time

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi") invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the "EEO is the Law" poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting