Information Security Lead Analyst Job at Citi (Singapore)

Information Security Professional Lead Analyst

The Info Sec Prof Lead Analyst is an intermediate level position responsible for...

Location

Philippines , City of Taguig

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

At least 7+ years of strong data analysis and report development experience
7+ years of experience in information security or related technology experience required
At least 7+ years’ experience with Business Intelligence Reporting tools like Cognos, Tableau
At least 7+ years’ experience with Databases like Oracle, SQL Server, Microsoft Access
Strong Business Intelligence Developer Skills
Strong understanding of application development life cycle, CI/CD and DevOps concepts
Excellent Excel data analysis and Access database skills
Excellent SQL Skills
Experience with issue resolution - ability to research, identify and communicate solutions
Consistently demonstrates clear and concise written and verbal communication

Job Responsibility

Design and implement a solution for performance measurements on effectiveness of controls and overall vulnerability assessment program
Analyze trends on assets security health posture and report using visualization tools for program review with management and stakeholders
Analyze and report aggregated data from multiple data sources
Develop data visualization mock-ups for monitoring program data trends and communicate using analytical tools
Develop reports for tracking program effectiveness and update power point deck for weekly, monthly and quarterly updates
Develop, optimize and provide continuous support for reports and ad-hoc queries from end user
Create dashboards with parameters and interactive drill down functionality
Analyze trends on assets security health posture and report using visualization tools for program review with management and stakeholders
Excellent Analytical Ability - Understand the systems and data flow at a high level to evaluate if appropriate controls are in place for the standards
Provide timely, accurate, and actionable reporting on application vulnerability activity, trends, service levels, and areas of concern to senior management

Fulltime

Lead Security Analyst

Provide technology consulting to external customers and internal project teams. ...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's or Master's degree in Computer Science, Information Security, or related field
Minimum 10 years in IT security, with at least 5 years in a leadership role
Proven experience with enterprise firewalls (Palo Alto, Fortinet, Check Point)
Strong cloud security knowledge (AWS, Azure, Google Cloud)
Experience with DDoS mitigation tools (Cloudflare, Akamai, AWS Shield)
Proficiency with Burpsuite
Hands-on with SIEM, SOAR, EDR, and vulnerability management tools
Strong analytical thinking and problem-solving ability
Excellent communication and stakeholder management

Job Responsibility

Develop and maintain the IT security roadmap aligned with cloud and enterprise infrastructure
Lead security design reviews for new systems, services, and cloud deployments
Deploy, configure, and manage network security appliances (e.g., next-gen firewalls, IDS/IPS, WAF)
Implement cybersecurity protocols including endpoint protection, identity management, and access control
Design and operate DDoS protection mechanisms for critical systems
Enforce security measures across public, private, and sovereign cloud environments
Monitor and audit cloud configurations for compliance with ISO 27001, NIST, CIS, etc.
Lead threat modeling, risk assessments, and vulnerability management
Oversee incident detection, response, and recovery processes
Ensure compliance with GDPR, HIPAA, PCI-DSS, and other regulations

What we offer

Health & Wellbeing benefits
Personal & Professional Development programs
Unconditional Inclusion environment
Comprehensive suite of benefits supporting physical, financial and emotional wellbeing

Fulltime

Senior Information Security Compliance Analyst

We're looking for a technically grounded Senior IS Compliance Analyst who speaks...

Location

United States , Chicago

Salary:

90000.00 - 130000.00 USD / Year

Blume Global

Expiration Date

Until further notice

Requirements

Hands-on experience in technical security roles such as Security Operations, Incident Response, Security Analysis, penetration testing, or similar
Practical knowledge of security tools, SIEM platforms, vulnerability management, and security monitoring
and ability to read and understand security logs, configurations, and technical documentation
6+ years of total experience with significant time in GRC
Working knowledge of ISO 27001, NIST frameworks, SOC 1/2, and GDPR requirements
Experience developing and implementing information security policies and controls
ISO 27001:2022 Lead Implementer and Lead Auditor certification

Job Responsibility

Lead technical security assessments and integration of acquired companies, mapping their security architectures and controls to our GRC frameworks, identifying gaps, and building remediation roadmaps that address both technical security and compliance alignment
Bridge technical security and business stakeholders by evaluating risks through a technical lens, working alongside security engineering teams to translate GRC requirements into practical security measures, and communicating effectively across technical and non-technical audiences
Develop and harmonize security policies and control frameworks across acquired entities, ensuring they're both audit ready and operationally sound, while translating between technical security requirements and governance documentation
Own customer security questionnaire responses by leveraging your hands-on security background to provide detailed, accurate answers and collaborating with infrastructure, application security, and operations teams to gather technical evidence
Drive continuous improvement of our GRC program through technical security enhancements, meaningful security and compliance metrics, and process improvements that increase both control effectiveness and operational efficiency

What we offer

health and welfare benefits
tuition assistance
401K savings and other retirement programs
employee assistance programs

Information Security Identity & Access Management Analyst

The Info Sec Prof Senior Analyst is an intermediate level position responsible f...

Location

India , Chennai

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

5-8 years of relevant Identity and Access Management experience
Applicable Certifications or willingness to earn within 12 months of joining
Consistently demonstrates clear and concise written and verbal communication
Proven influencing and relationship management skills
Proven analytical skills
Bachelor’s degree/University degree or equivalent experience

Job Responsibility

Identify potential Identity and Access Management (IAM) risks and make recommendations for enhancement
Lead execution of IAM governance procedures, specifically focusing on non-worker identities and IAM resources
Collect and analyze security risk evidence and coordinate with internal and external compliance and auditing agencies / officials
Develop and operationalize key risk indicators for related IAM topics and governance procedures
Produce insights from data that are tailored to specific requirements and audiences
Execute meetings and communicate complex security topics and IAM standards and best practices with all levels of the organization
Ensure that controls are utilized daily and that non-compliance remediation is addressed
Drive technological projects with cross-functional teams that support the expansion of IAM governance
Provide IAM consulting services, including interpreting and/or clarifying information security policy, procedures, standards or concepts
Assist with defining, implementing, and governing IS standards to align procedures and practices in compliance with Citi standards

What we offer

Best-in-class benefits
Global benefits
Equal opportunity employer

Fulltime

Information Security Administration Service Delivery Senior Analyst

The Identity and Access Management (IAM) Information Security Administration (IS...

Location

Hungary , Budapest

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

5+ years’ experience in an Information Security Administration environment (ISA provisioning, compliance reviews, incident/change management handling security engineering or related IS field) is desirable
Bachelor's degree or higher desired or the candidate should have proven equivalent work experience
Technical experience in security administration supporting a large user environment
Solid understanding of industry standard security practices desirable
knowledge of programming languages preferred
Spanish language (both verbal and written) is required
Good command of English language (both verbal and written)
Advanced proficiency with Microsoft Office tools and software
SSCP/CISSP/ITIL/PMP/Citi Lean certificate is an advantage
Be able to work independently and without any influence from manager

Job Responsibility

Provide customer service support and collaborate with other groups within the business and throughout Citi
Initiate process changes and improvements based on Lean methodology
Aid in guiding complex projects, utilizing pertinent tools and methodologies
Coach others, identifying development needs and resources to reach stretch capabilities
Able to handle simple thru complex, multi-tiered escalations, problems by utilizing key information security administration practices, policies and providing excellent customer service
Lead to resolve severity escalations and responsible for the team to identify root cause and create corrective action plan(s) as necessary
Create, track and complete Specific, Measurable, Achievable, Relevant, and Time-Bound (SMART) goals for projects and initiatives
Utilize complex Microsoft Office tools to create links between workflows with different formats
Advocate for change initiatives, and overcome resistance through an in-depth understanding of complex change theory
Communicate the need for change, involve stakeholders in the change process and apply change theory to complete successful adoption

What we offer

Cafeteria Program
Home Office Allowance (for colleagues working in hybrid work models)
Paid Parental Leave Program (maternity and paternity leave)
Private Medical Care Program and onsite medical rooms at our offices
Pension Plan Contribution to voluntary pension fund
Group Life Insurance
Employee Assistance Program
Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
Flexible work arrangements to support you in managing work - life balance
Career progression opportunities across geographies and business lines

Fulltime

Security Lead – Cloud & IT Security

HPE Operations is our innovative IT services organization. It provides the exper...

Location

India , Bangalore

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor's or Master's degree in Computer Science, Information Security, or related field
Minimum 10 years in IT security
At least 5 years in a leadership role
Proven track record in deploying and managing enterprise firewalls (e.g., Palo Alto, Fortinet, Check Point)
Strong knowledge of cloud security for AWS, Azure, and/or Google Cloud
Experience with DDoS mitigation solutions (e.g., Cloudflare, Akamai, AWS Shield)
Experience with Burpsuite
Hands-on knowledge of SIEM, SOAR, EDR, and vulnerability management tools
Strong analytical thinking
Problem-solving ability

Job Responsibility

Develop and maintain the organization's IT security roadmap aligned with cloud and enterprise infrastructure
Lead security design reviews for new systems, services, and cloud deployments
Deploy, configure, and manage network security appliances including next-generation firewalls, IDS/IPS, and web application firewalls
Implement and maintain cybersecurity protocols, including endpoint protection, identity management, and access control policies
Design and operate DDoS protection mechanisms to ensure availability of critical systems
Implement and enforce security measures in public, private, and sovereign cloud environments
Monitor and audit cloud configurations to ensure compliance with industry standards (ISO 27001, NIST, CIS, etc.)
Lead threat modeling, risk assessment, and vulnerability management initiatives
Oversee incident detection, response, and recovery processes to minimize business impact
Ensure adherence to regulatory and compliance requirements such as GDPR, HIPAA, PCI-DSS

What we offer

Health & Wellbeing benefits
Personal & Professional Development programs
Unconditional Inclusion environment
Comprehensive suite of benefits supporting physical, financial and emotional wellbeing

Fulltime

Security & Privacy Analyst

The Security & Privacy Analyst will play a key role in protecting Spectrum.Life’...

Location

United Kingdom

Salary:

Not provided

Spectrum Life

Expiration Date

Until further notice

Requirements

Experience in information security, privacy, compliance, or a related field
Strong understanding of GDPR, data protection principles, and privacy best practices
Familiarity with security operations, vulnerability management, and incident response
Experience with security tools (e.g., SIEM, endpoint protection, logging platforms)
Ability to interpret risks and communicate them clearly to technical and non-technical audiences
Strong documentation, analytical, and problem-solving skills
Excellent attention to detail and commitment to quality
Experience in health-tech, clinical platforms, or handling sensitive health data
Certifications such as ISO 27001 Lead Implementer/Auditor, CompTIA Security+, CISSP, CIPP/E, or equivalent
Experience supporting audits or managing compliance frameworks

Job Responsibility

Monitor, assess, and respond to security alerts, incidents, and vulnerabilities across the technology environment
Support security operations activities including log analysis, threat detection, endpoint security, and access control management
Conduct regular vulnerability assessments and coordinate remediation with relevant teams
Assist in maintaining and improving security tools, controls, and frameworks (e.g., SIEM, IAM, MDM, KnowBe4, encryption standards)
Support third-party security reviews and due diligence assessments
Participate in business continuity and disaster recovery planning and testing
Support GDPR and other applicable privacy frameworks (e.g., ePrivacy, UK GDPR, HIPAA-aligned practices for clinical contexts)
Conduct Data Protection Impact Assessments (DPIAs) and Legitimate Interest Assessments (LIAs)
Assist in maintaining Records of Processing Activities (RoPA)
Review new product features and vendor integrations for compliance with privacy-by-design and security-by-design principles

What we offer

Full time permanent contract
Competitive salary (Dependent on experience)
In-office, remote or hybrid working options
25 days annual leave
24/7 EAP and a wide range of health and wellbeing supports
Extensive list of employee perks and benefits

Fulltime

Security Incident Management Analyst

The Security Incident Management Analyst is an intermediate level position respo...

Location

Singapore , Singapore

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Relevant professional certifications issued by GIAC, AWS, etc., preferably GCCC, GCIH, CEH, ECSA
General Industry knowledge of reporting obligations pertaining to local and national laws and regulatory bodies such as OCC, SEC, ECB, MAS
Working knowledge of common security models (Defense-in-Depth) and frameworks (MITRE Attack, Cyber Kill Chain, STIX)
Working knowledge of VERIS taxonomy
Working knowledge of OSI model
Working knowledge of security and/or incident response in cloud environments
Working knowledge of software development best practices, including agile methods
Familiar with Atlassian tools
Previous experience working in highly regulated environment
Previous experience in a fusion center and/or exposure to large scale incident response

Job Responsibility

Work as part of a best in class ‘follow the sun’ security incident response team
Lead and manage incident response activities to ensure that requisite triage, containment, and eradication are completed within targeted timeframes
Ensure that the security incident record is complete, accurate and fit for purpose
Collect and analyze evidence including investigative findings and prepare to coordinate with internal and external compliance and audit personnel
Execute incident response meetings and communicate complex security topics
exhibit good judgment and discretion when initiating escalations to all levels of the organization
Ensure that controls are utilized daily and that non-compliance remediation is addressed by appropriate selection
Provide IS consulting services, including interpreting and/or clarifying information security policy, procedures, standards or concepts
Assist with defining and implementing information security standards to align procedures and practices in pursuit of compliance with Citigroup standards
Validate compliance with information security policies, practices, and procedures, and resolve a variety of information security related issues in coordination with the relevant business(es)

Fulltime

Information Security Lead Analyst

Citi

Location:
Singapore , Singapore

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
October 03, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Information Security Lead Analyst