Technology Information Security Officer
花旗银行（中国）有限公司上海分行（企业银行）
- 公司规模：500-1000人
- 公司性质：外资(欧美)
- 公司行业：银行
职位信息
- 发布日期：2013-09-18
- 工作地点：上海
- 招聘人数：若干
- 工作经验：一年以上
- 语言要求：普通话熟练
英语熟练 - 职位类别：其他 保安经理
职位描述
Responsibilities:
l Assists in the development and ongoing maintenance of systems and technology as it relates to Information Security.
Assists the system development and infrastructure units in identifying IS risks and the appropriate controls for the development of products and systems
Manages IS risk during the development of new products and applications, ensuring that risks are mitigated during the development process (e.g., ID/password, encryption, system configuration, access, and administration)
Assists with systems development and classification
Ensures that applications deployed in support of a business appropriately protect the information stored and processed by them
Participates in the definition and implementation of procedures to control developer access to production according to the corporate guidelines and standards
Performs technical IS risk reviews for every application the business owns, working with development managers to review test results
Works with the technology group to support and complete the application review process (e.g., ACQ)
l Advises the business.
Advises the business when a technical solution is required and its impact to the bottom line while still satisfying the business objectives
Interprets and translates the business IS program requirements into technical requirements
Educates the business to ensure awareness of IS principles, policies, and updates
Guides business on security matrix maintenance and update
l Partners with others.
Engages the BISOs where additional knowledge of the business is required
Collaborates with BISOs in inventorying the business assets, applications, and systems, and helps assess the risks in each
Monitors vulnerability assessments and ethical hacks, ensuring that issues are addressed
Establishes relationships with domain architects, project managers, and others within the technology development unit
Assists security incident response teams in the investigation of incidents by responding in a timely manner
l Manages the Information Security program and monitors IS performance.
Ensures that technical controls are embedded in day-to-day operations, and that remediation of non-compliance is documented and addressed
Establishes metrics to monitor IS performance
Ensures that systems development and other technology area practices and processes conform with IS policies and standards
Responds to the risk control self assessment (RCSA) and ISRA technical components
Reviews, documents, and tracks IS corrective actions and risk acceptances
Conduct regular IS reviews of technology, assessing systems and applications to evaluate vulnerabilities
Monitors and initiates appropriate changes to the risk profile of critical systems that the group produces or manages
Requirements:
l Experience with technology infrastructure (e.g., network, operating system, etc.), security engineering, and/or development of applications with security requirements
l Experience with interpretation, creation, and application of policy and standards (Level 3 procedures)
l Strong risk analysis and problem solving skills, Project management skills and ability to make decisions jointly with peers
l Experience with Information Security controls and ability to manage control practices
l Proficient verbal and written English language skills
l Industry certification a plus
l Assists in the development and ongoing maintenance of systems and technology as it relates to Information Security.
Assists the system development and infrastructure units in identifying IS risks and the appropriate controls for the development of products and systems
Manages IS risk during the development of new products and applications, ensuring that risks are mitigated during the development process (e.g., ID/password, encryption, system configuration, access, and administration)
Assists with systems development and classification
Ensures that applications deployed in support of a business appropriately protect the information stored and processed by them
Participates in the definition and implementation of procedures to control developer access to production according to the corporate guidelines and standards
Performs technical IS risk reviews for every application the business owns, working with development managers to review test results
Works with the technology group to support and complete the application review process (e.g., ACQ)
l Advises the business.
Advises the business when a technical solution is required and its impact to the bottom line while still satisfying the business objectives
Interprets and translates the business IS program requirements into technical requirements
Educates the business to ensure awareness of IS principles, policies, and updates
Guides business on security matrix maintenance and update
l Partners with others.
Engages the BISOs where additional knowledge of the business is required
Collaborates with BISOs in inventorying the business assets, applications, and systems, and helps assess the risks in each
Monitors vulnerability assessments and ethical hacks, ensuring that issues are addressed
Establishes relationships with domain architects, project managers, and others within the technology development unit
Assists security incident response teams in the investigation of incidents by responding in a timely manner
l Manages the Information Security program and monitors IS performance.
Ensures that technical controls are embedded in day-to-day operations, and that remediation of non-compliance is documented and addressed
Establishes metrics to monitor IS performance
Ensures that systems development and other technology area practices and processes conform with IS policies and standards
Responds to the risk control self assessment (RCSA) and ISRA technical components
Reviews, documents, and tracks IS corrective actions and risk acceptances
Conduct regular IS reviews of technology, assessing systems and applications to evaluate vulnerabilities
Monitors and initiates appropriate changes to the risk profile of critical systems that the group produces or manages
Requirements:
l Experience with technology infrastructure (e.g., network, operating system, etc.), security engineering, and/or development of applications with security requirements
l Experience with interpretation, creation, and application of policy and standards (Level 3 procedures)
l Strong risk analysis and problem solving skills, Project management skills and ability to make decisions jointly with peers
l Experience with Information Security controls and ability to manage control practices
l Proficient verbal and written English language skills
l Industry certification a plus
公司介绍
About Citi China
Citi first established an office in China on May 15, 1902, in Shanghai. In April 2007, Citi was among the first international banks to locally incorporate in China. Citi’s locally incorporated entity is known as Citibank (China) Co., Ltd, which is wholly owned by Citibank N.A. Today Citi is a leading international bank in China with footprint in thirteen cities across China (Beijing, Changsha, Chengdu, Chongqing, Dalian, Guangzhou, Guiyang, Hangzhou, Nanjing, Shanghai, Shenzhen, Tianjin, Wuxi). Citi has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions, Citi is the most global of all international banks in China.
关于花旗中国
花旗在中国的历史可追溯至一九零二年五月。花旗是中国领先的外资银行，为客户提供广泛的金融产品。2007年4月2日，作为首批成功转制本地法人银行的外资银行，花旗银行（中国）有限公司正式成立；2007年4月23日，花旗银行（中国）有限公司成为首批正式对中国境内公民开展人民币业务的外资银行之一。
目前，花旗分别在北京、上海、广州、深圳、天津、成都、杭州和大连设有多家分支行,开展企业银行业务和零售银行业务。花旗在全球100多个国家开展业务，是中国最具全球性的外资银行之一。
Our business is expanding rapidly and we are looking for highly qualified, ambitious individuals wishing to progress to the highest levels of their personal career development in Citibank.
We provide challenging and rewarding career opportunities with the vacancy:
The successful candidate will be provided with superior career development opportunities and a competitive remuneration package. If you are interested in being considered for the position please send your CV ( in English & Chinese) to us.
(Please indicate position applied & "51Job" on the envelope)
Citi first established an office in China on May 15, 1902, in Shanghai. In April 2007, Citi was among the first international banks to locally incorporate in China. Citi’s locally incorporated entity is known as Citibank (China) Co., Ltd, which is wholly owned by Citibank N.A. Today Citi is a leading international bank in China with footprint in thirteen cities across China (Beijing, Changsha, Chengdu, Chongqing, Dalian, Guangzhou, Guiyang, Hangzhou, Nanjing, Shanghai, Shenzhen, Tianjin, Wuxi). Citi has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions, Citi is the most global of all international banks in China.
关于花旗中国
花旗在中国的历史可追溯至一九零二年五月。花旗是中国领先的外资银行，为客户提供广泛的金融产品。2007年4月2日，作为首批成功转制本地法人银行的外资银行，花旗银行（中国）有限公司正式成立；2007年4月23日，花旗银行（中国）有限公司成为首批正式对中国境内公民开展人民币业务的外资银行之一。
目前，花旗分别在北京、上海、广州、深圳、天津、成都、杭州和大连设有多家分支行,开展企业银行业务和零售银行业务。花旗在全球100多个国家开展业务，是中国最具全球性的外资银行之一。
Our business is expanding rapidly and we are looking for highly qualified, ambitious individuals wishing to progress to the highest levels of their personal career development in Citibank.
We provide challenging and rewarding career opportunities with the vacancy:
The successful candidate will be provided with superior career development opportunities and a competitive remuneration package. If you are interested in being considered for the position please send your CV ( in English & Chinese) to us.
(Please indicate position applied & "51Job" on the envelope)
联系方式
- 公司地址：地址：span花园石桥路33号花旗集团大厦