The Cyber Security Architect is an intermediate level position responsible for driving efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citis data security policy. Responsibilities:<ul><li>Plan, research, and design security architecture for IT systems and applications (internally developed as well as vendor supplied) for processing multiple classification levels of data on prem, and cloud.</li><li>Determine the security controls for above, document appropriately and partner with IT architecture/development stakeholders to implement during early in system development life cycle</li><li>Perform security architecture and risk assessment of internally developed or acquired IT systems and applications using best practices including threat modelling. Ensure that security design and controls are consistent with organizations security architecture principals.</li><li>Provide security recommendations including automated controls, configurations on projects, processes, risk exceptions, corrective action plans, and risk reduction initiatives</li><li>Collaborate with the internal and external technology teams to drive the development of strategies and plans for improving both architecture and application security</li><li>Establish relationships with cross-functional areas including Business, Technology, and Compliance stakeholders and serve as a SECURITY subject-matter expert</li><li>Manage risk by analyzing the root cause of security issues, determining compensating controls, and driving remediation</li><li>Support Global Information Security policies, standards, and initiatives development and implementation by representing in different Citi action groups such as Delegated Action Groups (DAG).</li></ul> Qualifications:<ul><li>6-10 years of relevant experience</li><li>Additional technical certifications are preferred</li><li>Demonstrated ability to research and apply current information regarding the IS field</li><li>Consistently demonstrates clear and concise written and verbal communication</li><li>Proven analytical skills</li><li>Threat modelling using industry standard methodologies (e.g. STRIDE/DREAD) Experience developing Reference Security Architecture and Design Patterns to support proactive and automated controls</li><li>Security architecture assessments for one or more IT systems such as Web, Mobile, APIs/Microservices, Cloud (AWS/GCP/Azure/Oracle)</li><li>Strong knowledge of security for applications related to authentication / authorization, data protection, session management, data validation, and end point protections.</li></ul>What we’ll provide you:By joining Citi, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive base salary (which is annually reviewed), and enjoy a whole host of additional benefits such as:<ul><li>27 days annual leave (plus bank holidays)</li><li>A discretional annual performance related bonus</li><li>Private Medical Care &amp; Life Insurance</li><li>Employee Assistance Program</li><li>Pension Plan</li><li>Paid Parental Leave</li><li>Special discounts for employees, family, and friends</li><li>Access to an array of learning and development resources</li></ul><a href="https://careers.citigroup.com/why-citi/global-benefits.html" target="_blank">Visit our Global Benefits page to learn more.</a>Alongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self, every day. We want the best talent around the world to be energized to join us, motivated to stay and empowered to thrive.#LI-MK2------------------------------------------------------Job Family Group: Technology------------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Most Relevant Skills Please see the requirements listed above.------------------------------------------------------Other Relevant Skills For complementary skills, please see above and/or contact the recruiter.------------------------------------------------------Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" target="_blank">Accessibility at Citi</a>. View Citi’s <a href="https://www.citigroup.com/global/eeo-aa-policy" target="_blank">EEO Policy Statement</a> and the <a href="https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf" target="_blank">Know Your Rights</a> poster.