C

Citi

Runs banking and payments for global clients

Head of Cyber Intelligence

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeMexico City, CDMX, MexicoNo salary listedHybrid

About the Job

Requirements

  • At least 15 years of relevant experience is required in the English qualifications; the Spanish section describes 15+ years as desirable in cybersecurity, threat intelligence, information security, SOC, CSIRT, technology, or technology risk.
  • In-depth database knowledge is preferred.
  • Additional technical certifications are preferred.
  • Demonstrated technical aptitude and advanced understanding of networking protocols and infrastructure designs are required.
  • Advanced analytical and problem-solving skills are required.
  • Proficiency in interpreting and applying policies, standards, and procedures is required.
  • A Bachelor's/university degree or equivalent experience is required.
  • A Master's degree is preferred.
  • Minimum knowledge includes Cyber Threat Intelligence, active threat hunting, and incident response.
  • Knowledge of MITRE ATT&CK, MITRE ATLAS, STIX/TAXII, NIST AI RMF, NIST CSF 2.0, and the intelligence cycle is required.
  • Knowledge of indicators of compromise, indicators of attack, tactics, techniques and procedures, malware, ransomware, threat actors, malicious infrastructure, and advanced persistent threats is required.
  • Experience with threat intelligence platforms, security information and event management, security orchestration automation and response, endpoint detection and response, network detection and response, user and entity behavior analytics, and threat-analysis tools is required.
  • Knowledge of open-source intelligence and monitoring the deep and dark web is required.
  • Knowledge of machine learning and artificial intelligence fundamentals, including use of Python, is required.
  • Knowledge of the regulatory framework applicable to the financial sector is required.
  • Experience developing and implementing Cyber Threat Intelligence programs is required.
  • Experience preparing executive reports and intelligence products for different organizational levels is required.
  • Experience in financial institutions, banking, fintech, insurance, payment methods, or financial markets is required.
  • Demonstrated experience developing advanced analytics, automation, or artificial-intelligence models applied to cybersecurity is required.
  • A degree in cybersecurity, systems, informatics, computing, telecommunications, technology, or a related career is desirable.
  • A Master's degree in Data Science is desirable.
  • Certifications such as SC-200, CRTIA, CTIA, CompTIA Security+, CompTIA CySA+, OCT, GCTI, GOSI, CISSP, or CISM, or equivalent certifications, are desirable.
  • Ability to investigate and analyze the threat environment, correlate information from multiple sources, translate technical risks into business impacts, make decisions under pressure, and maintain confidentiality and ethical conduct is required.

Responsibilities

  • Plan and execute the Information Security strategy and develop and manage security solutions across multiple areas.
  • Use a global risk management model to analyze emerging security threats and define solutions to mitigate exposure.
  • Advise business and IT leaders on risk-management decisions.
  • Align the Information Security program with business strategy and coordinate with leadership to achieve program goals.
  • Determine the approach for executing functional strategy and oversee results, budgeting, planning, policy, and future strategy formulation.
  • Advance strategic-solution discussions for the program or business.
  • Manage resources and work allocation, manage a team, and advise or coach new or lower-level analysts.
  • Assess risk in business decisions, safeguard the firm, its clients, and assets, drive compliance with applicable laws, rules, and regulations, apply sound ethical judgment, and transparently escalate, manage, and report control issues.
  • Define and execute the corporate Cyber Intelligence strategy.
  • Design the operating model, processes, governance, and roadmap for the Cyber Intelligence function.
  • Lead Cybersecurity Threat Intelligence, threat hunting, and development of the threat landscape applicable to the bank.
  • Monitor open-source intelligence, CERTs, ISACs, deep web and dark web sources, and specialized platforms and vendors.
  • Analyze threat actors, campaigns, malware, infrastructure, indicators of compromise, indicators of attack, and tactics, techniques, and procedures.
  • Produce strategic, tactical, and operational intelligence for technical teams, committees, and senior management by developing an intelligence program that defines priority intelligence requirements.
  • Translate cyber threats into financial, operational, regulatory, and reputational impacts.
  • Coordinate investigations with the Cybersecurity Intelligence Center, Fraud, Technology Risk, Technology, and Business Continuity teams.
  • Advance the use of advanced analytics, automation, artificial intelligence, and predictive models.
  • Strengthen collaboration with regulatory entities, specialized organizations, and intelligence-sharing networks.
  • Develop and lead a specialized Cyber Intelligence team.
  • Coordinate internal, external, and regulatory audits.
  • Develop a Cyber Intelligence program that identifies potential threats proactively, supports collaboration across organizational areas, delivers timely decision-support information, maintains operational stability, protects clients and technology infrastructure, and minimizes reputational risk.

Desired Qualifications

  • At least five years leading Cyber Intelligence and active threat-hunting teams, including containment, detection, and response to events and incidents, is desirable.
  • Clear and concise written and verbal communication and the ability to remain unbiased in a diverse working environment are expected.

About the Company

Citi

Runs banking and payments for global clients

Citi runs banking, investment and payment services for companies, governments and individuals around the world. Its global network connects institutions with local banking systems, while its US consumer business sells credit cards and deposit accounts. Corporate clients use Citi to manage cash, finance trade and raise capital, and investors use its trading, custody and wealth services to hold and manage assets. The bank earns interest on loans and fees from payments, securities transactions, financial advice and account services. Citi traces its banking roots to 1812; the Citigroup holding company was formed in 1998, and its headquarters are in New York City.

Company size
10,001+
Company stage
IPO
Headquarters
New York City, New York
Founded
1812

Recently Posted Jobs

Explore more opportunities at Citi

See more jobs