Senior Technology & Cyber Risk Analyst

Citi; Województwo mazowieckie; Hybrid; PLN 165,000 - 281,000; Full time

Benefits offered by this job

Pension Plan 6% PPE

Private Medical Care

Life Insurance

Parental Leave

Sport Card

Holidays Allowance

Cafeteria / Flex Benefits

Annual Incentive

Job summary

Citi Solutions Center Poland is hiring a Senior Technology & Cyber Risk Analyst to safeguard Citi's technology environment by identifying, assessing, and mitigating technology and cyber risk across the business.

You will partner with technology and business teams, embed practical risk measures, and deliver regular risk assessments with clear recommendations. The role offers a hybrid work model and a comprehensive benefits package.

Qualifications

• Bachelor's degree or equivalent practical experience.
• Minimum of 3 years of experience in technology risk, cyber risk management, information security, or related IT field.
• Background supporting risk management, compliance, governance, or controls functions.
• Solid understanding of regulatory requirements, cyber security principles, strategies, and technologies.
• Working knowledge of IT systems, networks, cloud services, security infrastructure, and system vulnerabilities, with exposure to enterprise risk frameworks and risk reporting tools.
• Proven ability to exercise independent judgment, manage multiple initiatives, and meet deadlines in a fast-paced environment.
• Strong interpersonal and analytical skills to build cross-functional relationships and make sound decisions under pressure.
• Fluent English communication skills (written and verbal).

Responsibilities

• Evaluate technology and cyber risk exposure to confirm alignment with Citi's risk appetite.
• Partner with business and technology teams to embed practical risk mitigation measures.
• Build relationships with frontline technology teams to understand architecture and risk exposure.
• Advise stakeholders on risk mitigation strategies and control enhancements.
• Ensure risk activities align with internal policies, external regulations, and industry standards.
• Conduct regular risk assessments and document findings with actionable recommendations.
• Analyze data to spot emerging risk trends and provide timely recommendations.
• Report to senior management on risk assessment status and key risks.

Skills

Fluent English communication

Analytical thinking

Cross-functional collaboration

Independent judgment

Multitasking

Education

Bachelor's degree or equivalent

Tools

NIST CSF

COBIT

ISO 27001

FFIEC IT Examination Handbooks

Job description

As a Senior Technology & Cyber Risk Analyst at Citi, you will help safeguard the organization's technology environment by identifying, assessing, and mitigating technology and cyber risk across the business. Sitting within Citi's Operational Risk organization, you will work closely with technology and business teams to strengthen risk management practices and build organizational resilience. This role offers the opportunity to influence how Citi manages emerging technology and cyber threats at scale.

Responsibilities

• Evaluate technology and cyber risk exposure across the business to confirm it remains within Citi's acceptable risk appetite.
• Partner with business and technology teams to understand their risk profile and embed practical risk mitigation measures.
• Build strong working relationships with frontline technology and engineering teams (1LOD) across Wealth and Consumer tech to understand their architecture, priorities, challenges, and risk exposure.
• Advise stakeholders on risk mitigation strategies and control enhancements that strengthen technology and cyber resilience.
• Confirm that risk management activities align with internal policies, external regulations, and industry standards.
• Conduct regular technology and cyber risk assessments and document findings with clear recommendations for reducing exposure.
• Analyze data to spot emerging risk trends and deliver timely recommendations that reduce risk exposure.
• Report consistently to senior management on the status of technology and cyber risk assessments, highlighting key risks and areas of concern.

Required Qualifications & Skills

• Bachelor's degree or equivalent practical experience.
• Minimum of 3 years of experience in technology risk, cyber risk management, information security, or a related IT field.
• Background supporting risk management, compliance, governance, or controls functions.
• Solid understanding of regulatory requirements, cyber security principles, strategies, and technologies.
• Working knowledge of IT systems, networks, cloud services, security infrastructure, and system vulnerabilities, along with exposure to enterprise risk frameworks, risk reporting tools, and risk types such as credit, market, and liquidity.
• Proven ability to exercise independent judgment, manage multiple initiatives, and meet deadlines in a fast‑paced environment.
• Strong interpersonal and analytical skills to build cross‑functional relationships, identify emerging risk trends, and make sound decisions under pressure while maintaining high integrity and professionalism.
• Fluent English communication skills (written and verbal), with the ability to articulate technical and risk concepts clearly to global stakeholders.

Beneficial Skills & Qualifications

• Exposure to Wealth Management or Retail / Consumer Banking technology platforms from a 1st, 2nd, or 3rd Line of Defense (1LOD / 2LOD / 3LOD) risk, control, or audit perspective.
• Familiarity with technology risk and control frameworks such as NIST CSF, COBIT, ISO 27001, or FFIEC IT Examination Handbooks.
• Understanding of application security, third‑party and vendor risk management, and technology change management processes.
• Experience with governance, risk, and compliance tools such as Archer or ServiceNow GRC for tracking risks, issues, and controls.
• Ability to translate complex technical information into clear communications for senior stakeholders and non‑technical audiences, with strong attention to detail under tight deadlines.

By joining Citi Solutions Center Poland, you will not only be part of a business casual workplace with a hybrid working model (currently up to 2 days working at home per week), but also (potentially, subject to final offer) receive a competitive base salary and enjoy a whole host of additional benefits which can include:

• Employer paid Defined Contribution Pension Plan contribution of 6% of employee’s pensionable earnings (PPE Program)
• Employer paid Private Medical Care Package for employees and Private Medical Care Packages for certain family members available at preferential rates
• Employer paid Life Insurance Program for employees and Life Insurance for certain family members available at preferential rates
• Employee Assistance Program financed by Employer Paid Parental Leave Program (maternity and paternity leave; statutory and 2 weeks additional paid paternity leave
• Sport Card for employees subsidised via Social Benefits Fund and Sport Cards for certain family members available at preferential rates
• Additional benefits from Company’s Social Benefit Fund, in particular: Holidays Allowance, support for sport and cultural activities, team building events.
• Additional day off for volunteering
• Cafeteria/ flex benefit – a company benefits system which enables employees to select and purchase benefits offered by a provider and available for employees on the platform.
• Opportunity to receive an annual discretionary incentive award
• Special offers and discounts for employees

Copy and paste the URL below into a new tab on your web browser to view the Remuneration Regulations extract: https://tbcdn.talentbrew.com/company/287/cms/v3/docs/policies/RemunerationRegulations-KeyProvisions-CitibankEurope_plc_05012025_A.pdf

• Supports technology and/or cyber risk assessments specifically within Wealth Management or US Consumer & Commercial Credit (USCC) technology platforms, including front‑end client‑facing systems, data management platforms, and core banking infrastructure.
• Supports 2nd Line of Defense oversight activities, including the review of technology risk metrics, Key Risk Indicators (KRIs), and control effectiveness monitoring across Wealth and USCC technology domains.
• Assists in the preparation of regular technology and cyber risk reporting packs, dashboards, and management information for senior leadership, covering Wealth and/or USCC technology risk themes.
• Develops foundational relationships with Wealth and USCC technology teams, operations, and product owners to build an understanding of end‑to‑end technology processes and associated risk exposures.
• Supports preparation of materials for governance forums, risk committees, and senior management briefings, including meeting minutes, action item tracking, and follow‑up coordination.

Job Family Group

Risk Management

Job Family

Operational Risk

Time Type

Full time

Primary Location Full Time Salary Range

165 020,00 zł - 280 980,00 zł

Most Relevant Skills

Analytical Thinking, Controls Lifecycle, Credible Challenge, Governance, Policy, Procedure, and Regulation, Risk Management Lifecycle.

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.