Junior Information Systems Security Officer

Our Benefits

We embrace diversity, prioritizing the hiring of people from diverse backgrounds. Our inclusive culture is a source of pride and strength, fostering innovation and mutual respect.

Citco welcomes and encourages applications from people with disabilities. Accommodations are available upon request for candidates taking part in all aspects of the selection.

Information Systems Security Office Team (‘ISSO Team’) is a group-wide resource, which covers all the divisions within the Citco Group of companies as defined on www.citco.com. The ISSO Team strategy is to uphold, maintain and continuously improve the Role Based Access Group (RBAG) framework within Citco’s User Access Management process. 

The ISSO Team has resources based in Amsterdam (The Netherlands), Manila (The Philippines), Hyderabad (India) and Toronto (Canada).

Overview 

The Junior Information Systems Security Officer (Junior ISSO) will support access governance for production applications under the Role Based Access Group (RBAG) framework which is within Citco’s User Access Management process. The Junior ISSO will assist with access reviews, onboarding/offboarding of applications to Citco’s Intake/Outtake/RBAG process, monitoring production application access, and remediation activities while operating in a second-line, check and-challenge capacity. 

Position Purpose 

 Work within the ISSO Team for providing an efficient and effective method to manage information security risk, improve the effectiveness of information security and user access control to ensure the organization’s information and information systems are protected from unauthorized access, use and disclosure. This includes: o Partner with the business and other group functions to develop and execute the User Access Management Framework. o Conduct monthly monitoring reviews in accordance with the monitoring plans and report results to relevant stakeholders.

· Engage with Business and Support Function Management across the Citco Divisions to further improve the control environment in a collaborative manner.

· Complete the tasks assigned by ISSO Management and effectively achieve the established goals and objectives. 

· Collaborate with IT Security team members to effectively and efficiently accomplish departmental goals and objectives. 

Main Job Functions/Key Responsibilities 

· Reports to ISSO Management and cultivates and maintains positive, professional working relationships with ISSO staff. 

· Supports access governance processes by reviewing access requests and approvals for production applications in accordance with Citco’s User Access Management and Role-Based Access Group (RBAG) processes. 

· Assists with client access certification campaigns and reviews Active Directory (AD) security groups to ensure appropriate access and compliance with established security policies and procedures. 

· Monitors application access records, identifies potential anomalies or irregularities, and escalates issues to the ISSO Management for investigation and resolution. 

· Validates access provisioning activities against approved access requests and collaborates with provisioning teams to investigate and resolve discrepancies. 

· Maintains accurate and up-to-date documentation of access controls, remediation activities, and related security processes. 

· Supports audit and compliance requests by providing accurate documentation, access records, and relevant information in a timely manner.

· Participate in the onboarding of new applications to Citco’s User Access Management and Role-Based Access Group (RBAG) processes, ensuring alignment with established access control and security requirements. 

· Attends meetings with business and technical stakeholders, documents action items, and tracks assigned owners to support timely completion. · Completes assigned ISSO tasks within agreed timelines and in line with function objectives.

· Monitors ACL control effectiveness and work with the team to improve application match rates 100%. · Identifies root causes of control breaks and supports preventive actions. 

· Maintains expertise through continuous learning and training to stay abreast of emerging and proposed developments in Information Security, Risk Management, and Auditing, leveraging insights from various industry organizations and assessing their potential impact on the company. 

Requirements Education: 

The candidate should possess at least a relevant bachelor’s degree. Optional Qualification(s)/Certification(s): CIA, CISA, CRISC, or other relevant IT/Risk/Audit/IT Security certifications.

 Professional Experience: 

One up to three years of experience in progressive Risk Management, Internal Controls, Internal Audit, or IT Audit function within a financial institution or Big 4 audit firm, ideally with experience in IT and/or IT Security functions.

 Computer Application(s): Hands-on experience with automated internal audit applications and tools, such as ACL Analytics and SQL, is an advantage. Proficiency in Microsoft Word, Excel, PowerPoint, and Visio is also expected. Language(s): Excellent written and spoken English is required. Key Competencies: 

· Client Focus. · Effective Communication. · Sound Decision-Making. · Results-Oriented Personal Characteristics: · Confident and articulate, with the ability to communicate clearly, concisely, and effectively, both oral and written. 

· Strong attention to detail, with a commitment to accuracy and quality. · Diplomatic and professional, with the tenacity and persistence required to achieve objectives and complete tasks.

· A strong team player who works effectively within the ISSO function and collaborates successfully with colleagues and stakeholders to deliver a high quality service. · Creative, innovative, and open to new ideas and approaches. 

· Willing to take on responsibility and work independently with minimal supervision. Working Hours/Conditions: · This role requires flexibility in providing cross-regional support. Prepared to partake on a shifting schedule -- APAC, EMEA and Americas. Occasional public holidays or weekend support may be required.