Chief Information Security Officer

Citi; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Join a forward-thinking financial institution as the Chief Information Security Officer, where you will be at the forefront of safeguarding digital assets and ensuring compliance with stringent regulations. This pivotal role encompasses developing and managing comprehensive information security strategies, risk management programs, and incident response protocols. You will lead a dedicated team, fostering a culture of security awareness while innovating security architecture to combat emerging cyber threats. If you are passionate about cybersecurity and ready to make a significant impact in a dynamic environment, this opportunity is perfect for you.

Qualifications

• Proven experience in developing and managing information security strategies.
• Deep understanding of regulatory environment and compliance requirements.

Responsibilities

• Lead the development and implementation of the bank's information security strategy.
• Ensure compliance with Mexican information security regulations and standards.

Skills

Cybersecurity Strategy Development

Regulatory Compliance

Risk Management

Incident Response

Security Architecture

Vendor Management

Team Leadership

Education

Bachelor's Degree in Computer Science or related field

Master's Degree in Information Security or related field

Tools

Security Monitoring Tools

Incident Response Tools

Data Security Technologies

Job description

The Chief Information Security Officer (CISO) is a senior executive responsible for establishing and maintaining the bank’s information security strategy and ensuring that all information assets and technologies are adequately protected. The CISO plays a critical role in safeguarding the bank's data, ensuring compliance with local regulations, and mitigating risks associated with cybersecurity threats. This position requires a deep understanding of the regulatory environment in Mexico, including compliance with the National Banking and Securities Commission (CNBV) regulations and other relevant financial regulations, as well as Information Security Internacional Standards.

Position is responsible for defining the Security Suite system strategy and evolution while also ensuring stability, resilience and soundness of these platforms which are serving the entire system´s platform of the bank.

**Key Responsibilities:**

- **Strategic Leadership:** Develop, implement, and manage the bank’s information security strategy, policies, and procedures to protect the organization’s digital assets, in line with both international standards and local regulatory requirements.

- **Regulatory Compliance:** Ensure that the bank complies with all applicable information security regulations and standards set forth by Mexican authorities, including Banxico and CNBV guidelines, LFPDPPP, and other relevant legislation. Collaborate with legal and compliance teams to stay updated on regulatory changes and implement necessary adjustments.

- **Risk Management:** Identify, assess, and mitigate risks related to cybersecurity threats. Develop and manage a comprehensive risk management program that includes regular risk assessments, audits, and vulnerability testing. Ensure that the bank is prepared to respond to potential security incidents and breaches.

- **Incident Response:** Establish and maintain a robust incident response capability with a clear response protocol. Lead the response to security breaches or incidents, including the investigation, remediation, and reporting of such events. Coordinate with internal and external stakeholders, including regulatory bodies, as required.

- **Security Awareness:** Promote a culture of security awareness within the bank. Develop and oversee training programs for employees at all levels, ensuring they understand their roles and responsibilities in maintaining the bank’s information security posture.

- **Security Architecture & Innovation:** Evaluate, design, govern and implement advanced security systems, technologies and practices to protect the bank’s assets and infrastructure, including Authentication systems, Data Security, End point security, cloud security, etc . Stay current with the latest developments in cybersecurity and adapt tooling and strategies to address emerging threats.

- **Vendor Management:** Assess and manage the security posture of third-party vendors and partners. Ensure that all third parties comply with the bank’s security standards and regulatory requirements.

- **Team Leadership:** Lead and mentor the information security team. Foster a collaborative and innovative environment, providing guidance and support to ensure the team’s success.

** Security Operations ** enable through outsourced managed services the Cyber intelligence, Security Monitoring, Detection and Response, Digital Forensics and Threat and vulneravility management capabilities

------------------------------------------------------

Job Family Group:

Technology

------------------------------------------------------

Job Family:

Technology Management

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi .

View Citi’s EEO Policy Statement and the Know Your Rights poster.