BANAMEX - ISO Sr. Analyst - AVP

PowerToFly; Ciudad de México; Presencial; MXN 700,000 - 900,000; Jornada completa

Descripción de la vacante

Una empresa multinacional en Ciudad de México busca un Analista Sr. de Operaciones de Seguridad de la Información con 5-8 años de experiencia. El candidato ideal debe tener conocimientos técnicos en ciberseguridad, habilidades de comunicación efectivas y dominio del inglés. Las responsabilidades incluyen abordar problemas de seguridad, gestionar el cumplimiento de políticas y desarrollar planes de acción. Se valoran certificaciones como CISM y CISSP. Se ofrece un entorno dinámico y diverso.

Formación

• 5-8 años de experiencia relevante.
• Demuestra habilidades claras de comunicación escrita y verbal.
• Capaz de influir en otras personas y gestionar relaciones.

Responsabilidades

• Abordar problemas de seguridad en programas de seguridad de la información.
• Gestionar el cumplimiento de requisitos de seguridad de la información.
• Desarrollar Planes de Acción Correctiva para brechas de seguridad.

Conocimientos

Conocimientos técnicos en seguridad de la información y ciberseguridad

Análisis de seguridad

Trabajo en equipo

Habilidades de comunicación

Inglés intermedio-avanzado

Educación

Licenciatura relacionada a sistemas o equivalente

Herramientas

Conocimientos en nube

Conocimientos en APIs

Descripción del empleo

The Technical Information Security Operations (TISO) Sr. Analyst is an intermediate level position responsible for leading efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.

Responsibilities:

• Address security issues identified in the various information security programs
• Review and address issues identified within various Information Security (IS) programs and ensure all IS issues related to Internal Audit, and External Auditors are closed by their original target date
• Improve the efficacy of governance processes by identifying risks, monitoring controls, and remediating issues
• Establish cross-sector working relationships and complete weekly awareness discussions with local team to efficiently tackle security issues
• Ensure risk exceptions are raised, registered and closed on a timely basis and communicate updates and changes to the global standards
• Complete Risk Assessment process, including completing accurate inventory reporting, data classification, threat analysis, and action plans
• Test and validate that the business complies with applicable IS requirements; develop and implement IS policies and procedures
• Determine and validate appropriate level of controls are being implemented to safeguard sensitive data
• Develop Corrective Action Plans for all Information Security-related gaps and approve all closures through reviewing evidence to ensure each closure meets Citi Requirements
• Assume informal/formal mentorship role within teams and assist with the coaching and training of new team members
• Has the ability to operate with a limited level of direct supervision.
• Can exercise independence of judgement and autonomy.
• Acts as SME to senior stakeholders and /or other team members.
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm’s reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Qualifications:

• 5-8 years of relevant experience
• Proficient in interpreting and applying policies, standards and procedures
• Consistently demonstrates clear and concise written and verbal communication
• Proven influencing and relationship management skills
• Proven analytical skills

Education:

• Bachelor’s degree/University degree or equivalent experience

Descripción adicional de puesto:

• Indispensables conocimientos técnicos en seguridad de la información y ciberseguridad
• Conocimientos sólidos en riesgos de seguridad de la información, análisis de seguridad, evaluación de aplicaciones, análisis de vulnerabilidades
• Preferentes conocimientos en nube, APIs
• Deseables certificaciones CISM, CISSP, CEH, CompTIA
• Deseable maestría relacionada a seguridad de la información y/o sistemas
• Licenciatura y/o Ingeniería relacionada a sistemas
• +5 años de experiencia en el ramo de Seguridad de la Información
• Habilidades de comunicación, trabajo en equipo, trabajo bajo presión, autodidacto, búsqueda de soluciones
• Indispensable inglés intermedio- avanzado (conversacional)

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity, review Accessibility at Citi. View Citi’s EEO Policy Statement and the Know Your Rights poster.