CISO - Information Security Data Redaction Specialist

Job Description

• The Info Sec Prof Senior Analyst is an intermediate level position responsible for leading efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citis data security policy.
Responsibilities:
• Identify potential information security (IS) risks and make recommendations for enhancement
• Collect and analyze security risk evidence and coordinate with internal and external compliance and auditing agencies / officials
• Execute meetings and communicate complex security topics and safe IS practices with all levels of the organization
• Ensure that controls are utilized daily and that non-compliance remediation is addressed
• Provide IS consulting services, including interpreting and/or clarifying information security policy, procedures, standards or concepts
• Assist with defining and implementing IS standards to align procedures and practices in compliance with Citi standards
• Educate and advise on safe information security practices and current, changing, and/or recommended information security requirements
• Validate compliance with IS policies, practices, and procedures, and resolve a variety of IS related issues in coordination with the business
• Assume informal/formal mentorship role within teams and assist with the coaching and training of new team members
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firms reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.
Qualifications:
• 5-8 years of relevant experience
• Applicable Certifications or willingness to earn within 12 months of joining
• Consistently demonstrates clear and concise written and verbal communication
• Proven influencing and relationship management skills
• Proven analytical skills
Education:
• Bachelor s degree/University degree or equivalent experience
This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.Citi is committed to continuously strengthening the controls around the protection of sensitive data. This role is part of the CISO Global Data Redaction Team which works with Application Teams in safeguarding and protecting sensitive data in non-Production environments for all of Citi. This is a critical position responsible for working as a partner with business segments to properly redact and test at-risk applications and will have the opportunity to work on redacting applications, in multiple platforms, using best practice and established methodologies. The candidate will also serve as the initial point of contact with Global Data Redaction customers to identify the redaction needs and methods to use for a particular business data. The candidate will be responsible for working with Applications Teams to help identify and secure the sensitive data within the non-production environments and will work to continuously improve client service and seek strategic solutions and enhancements to identifying and securing personally identifiable information. The candidate will need to be able to work proactively and independently to understand the customer requirements and provide effort estimation on planned tasks and propose technical solutions.Responsibilities:
• Gain experience working with Talend, an extract, transform, and load (ETL) tool.
• Work with various types of databases, such as Oracle, SQL Server, Sybase, and DB2, as well as redaction of files on Windows, Unix, and Mainframe platforms.
• Develop and implement algorithms, scripts, and processes to continuously improve client service and seek strategic solutions and enhancements to identifying and securing personally identifiable information (PII).
• Gain knowledge of all phases of the Software Development Life Cycle process by being fully involved in analysis, design, development, implementation, and maintenance of various application projects.
• Learn about information security and data transformation techniques, as well as, identifying and securing sensitive data (i.e.: PII).
• Research new products/tools and provide recommendations to streamline the Redaction Teams process and solve new client requirements.
• Work with information security officers and application development community to assist in identifying and reducing IS risk within applications and ensure adherence to policies.
• Work with business teams, information security officers, infrastructure, engineering, and architecture teams, and DBAs/SAs to ensure appropriate solutions are implemented in a timely manner to support our business users.
Qualifications:
• 7+ years of experience working in database environment (Oracle/SQL Server/Sybase/DB2)
• Extensive hands-on experience with Unix and shell scripting
• Solid understanding and experience with ETL Tools and Data processing. Experience with Talend, Ab Initio, or Informatica is a big plus
• Knowledge of connectivity/file transfer protocols, such as NDM, SCP, SSH is a big plus
• Experience creating/scheduling jobs in Autosys is a plus
• Knowledge/experience working with CyberArk is a plus
• Knowledge/experience with Mainframe files, copy jobs and data handling is a plus
• Understanding of all phases of the Software Development Life Cycle process
• Experience in writing reusable, testable and efficient code with proper error and exception handling.
• Experience with source code management and deployment, and release management are a plus
• Experience in creating Requirement/Specification documents
• Ability to demonstrate both technical and functional/business knowledge regarding past projects
• Must be able to work independently, as well as in a team environment and ability to prioritize tasks and projects so that deadlines are met
• Highly effective verbal and written communication skills
• Excellent organizational and project management skills
• Strong analytic and troubleshooting skills
• Prior working experience with Citigroup is a big plus
,

Keyskills :
ab initioetl toolssql serverlife cycledata securitysecurity risksecurity policyeffort estimation