Senior 2nd Line Cyber & Tech Risk Lead Analyst

Citigroup Inc.; Warszawa; Hybrid; PLN 340,000 - 580,000; Full time

Benefits offered by this job

Pension plan

Private medical care

Life insurance

Employee assistance program

Sport card

Volunteer time off

Job summary

Citigroup Inc. in Warsaw, Poland, seeks a Cyber/Tech 2nd LOD Senior Lead Analyst to drive risk assessments and independent assurance across technology and cyber domains. The role partners with ORM, ICRM, and compliance to challenge controls and minimize losses from tech risks.

You will manage threat projects, oversee policy application, and push risk-informed actions across multiple stakeholders, with a hybrid work model and a competitive base salary.

Qualifications

• Experience in technology and cyber risk assessments across global organizations.
• Proven ability to lead control design and operating effectiveness evaluation.
• Excellent presentation and written executive materials.
• Outstanding communication and influencing skills at all levels.
• Strong relationship management with senior stakeholders.
• Expert in risk management frameworks such as ISO27001, COBIT, TOGAF, CRI.

Responsibilities

• Manages internal projects on threat issues across Citi's defense.
• Oversees compliance and technology/cyber policies and procedures.
• Assesses tech and cyber risks and drives root-cause actions.
• Leads independent assurance activities including testing.
• Monitors risk indicators and discusses breaches with owners.
• Leads second line assessments and risk evaluations.
• Evaluates risks of new initiatives and programs.
• Challenges control designs to align with risk appetite.
• Performs ad-hoc research and data preparation for executive reporting.

Skills

Cyber risk assessments

Executive presentation

Stakeholder management

Communication skills

Risk management frameworks

Job description

Citigroup Inc. in Warsaw, Poland, seeks a Cyber/Tech 2nd LOD Senior Lead Analyst to drive risk assessments and independent assurance across technology and cyber domains. The role partners with ORM, ICRM, and compliance to challenge controls and minimize losses from tech risks.

You will manage threat projects, oversee policy application, and push risk-informed actions across multiple stakeholders, with a hybrid work model and a competitive base salary.