Security Incident Lead

$96,400 - $144,600/Yr

Citigroup - Irving, TX

Full-time - Mid Level

Irving, TX

10,001+ employees

Credit Intermediation and Related Activities

About the position

The Info Sec Prof Lead Analyst is an intermediate level position responsible for driving efforts to prevent, monitor, and respond to information/data breaches and cyber-attacks. The role focuses on ensuring the execution of Information Security directives and activities in alignment with Citi's data security policy, while collaborating with a team of security specialists to protect Citigroup's infrastructure and assets.

Responsibilities

• Manage risk throughout the security incident lifecycle.
• Lead and manage incident response activities to ensure timely triage, containment, and eradication of incidents.
• Ensure the security incident record is complete, accurate, and fit for purpose.
• Collect and analyze evidence, preparing to coordinate with compliance and audit personnel.
• Execute incident response meetings and communicate complex security topics effectively.
• Ensure daily utilization of controls and address non-compliance remediation appropriately.
• Provide IS consulting services, interpreting information security policies and standards.
• Assist in defining and implementing information security standards for compliance with Citigroup standards.
• Validate compliance with information security policies and resolve related issues with relevant businesses.
• Mentor team members and assist with their training and development.
• Act as an authority for cyber security incidents, identifying and escalating threats with urgency.

Requirements

• Relevant professional certifications (e.g., GCCC, GCIH, CEH, ECSA).
• General industry knowledge of reporting obligations to regulatory bodies (e.g., OCC, SEC).
• Working knowledge of common security models and frameworks (e.g., MITRE Attack, Cyber Kill Chain).
• Familiarity with VERIS taxonomy and OSI model.
• Experience in security and incident response in cloud environments.
• Knowledge of software development best practices, including agile methods.
• Previous experience in a highly regulated environment and in a fusion center.
• Experience with information technology and/or information security in the financial services industry.
• Understanding of common security threats, vulnerabilities, and adversary tactics.
• Proficient in threat intelligence and understanding of Cyber Adversarial levels.

Nice-to-haves

• Master's degree in a related field.
• Experience with cyber investigations and incident response.
• Working knowledge of CIS Top 18, NIST 800-53, and NIST 800-61.

Benefits

• Medical, dental & vision coverage
• 401(k)
• Life, accident, and disability insurance
• Wellness programs
• Paid time off packages including vacation, sick leave, and paid holidays