Senior Technology & Cyber Risk Analyst

Responsibilities:

• Assess business technology and cyber risk exposure against Citi’s risk appetite.
• Partner with business and technology teams to understand risk profiles and embed practical mitigation.
• Build relationships with Wealth and Consumer technology and engineering teams; understand architecture, priorities, challenges, and risk exposure.
• Advise stakeholders on mitigation strategies and control enhancements to strengthen technology and cyber resilience.
• Ensure alignment with internal policies, regulations, and industry standards.
• Conduct risk assessments, document findings, and recommend ways to reduce exposure.
• Analyze data for emerging risk trends and provide timely recommendations.
• Report assessment status and key risks to senior management.
• Support second-line oversight across Wealth and US Consumer & Commercial Credit technology, including risk metrics, KRIs, and control effectiveness monitoring.
• Prepare reporting packs, dashboards, governance materials, minutes, action tracking, and senior management briefings.
• Work with technology, operations, and product teams to understand processes and risks.

Required qualifications and skills:

• Bachelor’s degree or equivalent practical experience.
• At least 3 years in technology risk, cyber risk management, information security, or related IT field.
• Background in risk management, compliance, governance, or controls.
• Understanding of regulatory requirements, cybersecurity principles, strategies, and technologies.
• Working knowledge of IT systems, networks, cloud services, security infrastructure, and vulnerabilities.
• Exposure to enterprise risk frameworks, risk reporting tools, and credit, market, and liquidity risk.
• Independent judgment; ability to manage multiple initiatives and deadlines; strong analytical and interpersonal skills, integrity, and professionalism.
• Fluent written and verbal English; able to explain technical and risk concepts clearly to global stakeholders.

Beneficial qualifications:

• Wealth Management or Retail and Consumer Banking technology exposure from first-, second-, or third-line risk, control, or audit.
• Familiarity with NIST CSF, COBIT, ISO 27001, or FFIEC IT Examination Handbooks.
• Understanding of application security, third-party/vendor risk, and technology change management.
• Experience with Archer or ServiceNow GRC.