Senior Lead Analyst Tech and Cyber Risk 2nd LOD

Citigroup; Warszawa; Hybrid; PLN 341,000 - 581,000; Full time

Benefits offered by this job

6% pension contribution

Private medical care

Life insurance

Employee assistance program

Sport card

Job summary

Citigroup in Warsaw seeks a Senior Lead Analyst for Technology, Cyber Compliance and Operational Risk Office (TCCORO). You will assess technology and cyber risks, challenge controls, and drive risk-mitigating actions across lines of defense.

You will collaborate with ORM and ICRM partners, lead assurance activities, and communicate effectively with senior stakeholders on risk implications and remediation paths.

Qualifications

• Experience in technology and cyber risk assessments, metrics, enterprise technology services, risks, and controls within globally complex organizations.
• Advanced knowledge in control design, operating effectiveness evaluation, testing and reporting to mitigate risk.
• Excellent presentation and executive communication skills.

Responsibilities

• Manage internal projects on threat issues supporting various stakeholders and measure effectiveness of defenses.
• Establish and oversee compliance, governance, and risk policies for technology and cyber.
• Independently assess technology and cyber risks and drive root-cause actions to reduce losses.
• Lead independent assurance activities including controls testing.
• Monitor risk indicators and discuss breaches with owners to drive corrective actions.

Skills

Cyber risk assessments

Risk metrics

Executive communication

Stakeholder management

Analytical thinking

Tools

ISO27001

COBIT

TOGAF

CRI framework

Job description

Citigroup in Warsaw seeks a Senior Lead Analyst for Technology, Cyber Compliance and Operational Risk Office (TCCORO). You will assess technology and cyber risks, challenge controls, and drive risk-mitigating actions across lines of defense.

You will collaborate with ORM and ICRM partners, lead assurance activities, and communicate effectively with senior stakeholders on risk implications and remediation paths.