You will be needed onsite in London 4-5 days a week, please DO NOT apply unless you can commit to this.
The Information Security Officer is a senior level professional position responsible for driving efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall purpose of this role is to ensure the execution of Information Security (IS) directives and activities in alignment with Citi's information and cybersecurity policy within the supported business units, primarily Citi Technology Infrastructure.
The Security Officer ISO IAM Cloud must have the following skills and experience.
* Strong understanding of cloud security architectures (ie AWS Well-Architected Framework, Google Cloud Security Command Centre).
* Knowledge of the Identity and Access management (IAM) security models of AWS and GCP.
* In-depth knowledge of cloud infrastructure and architecture (eg VPC, EC2, S3, Cloud Storage and Compute Engine.
* Familiarity with compliance and risk frameworks (NIST, ISO 27001, CSA STAR)
* Experience in business engagement for Information Security, Risk or Control & Compliance, IT Analysis/Design or Program/Project Management.
* Perform Information Security risk assessments and familiarity with Information Security Risk Governance.
* At least 2 years' experience securing cloud environments particularly AWS and GCP
* Bachelors degree or higher (Computer Science or Cybersecurity preferred) or equivalent work experience.
* Industry certifications such as CISSP/CISM/CCSP are desired.
* Have good communication skills with the ability to articulate clearly in high stress situations.
* Self-starter with good problem-solving skills.
* Proven influencing and relationship management skills.
* Familiarity with IaC security (Terraform, CloudFormation)
* Advanced proficiency with Microsoft Office tools and software.
* Public Cloud Solution Architect or Security Certifications are plus (ie AWS Certified Solution Architect, GCP Professional Cloud Security Engineer)
Responsibilities:
Identify opportunities to automate and standardize information security controls and for the supported groups.
Resolve any vulnerabilities or issues detected in an application or infrastructure.
Analyze source code to mitigate identified weaknesses and vulnerabilities within the system.
Review and validate automated testing results and prioritize actions that resolve issues based on overall risk.
Scan and analyze applications with automated tools, and perform manual testing if necessary.
Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions.
Direct the development and delivery of secure solutions by coordinating with business and technical contacts.
Contribute to execution of the architectural vision for all IT systems through major, complex IT architecture projects.
Security Architecture: Collaborate with IT to ensure system architecture follows corporate policies and IT best practices.
Risk management: Identify, assess and mitigate security risks. Identify application compensating controls for non-compliant items.
Provide technical leadership and is responsible for developing components of, or the overall systems design.
Translate complex business problems into sound technical solutions.
Provide integrated systems planning and recommends innovative technologies that will enhance the current system.
Recommend appropriate infrastructure platforms, and communication links required to support IT goals and strategy.
Impact the architecture function by influencing decisions through advice, counsel or facilitating services.
Guide, influences and persuades others with developed communication and diplomacy skills
Salary description
£400.00 - £400.00 per day