Senior Technology & Cyber Risk Analyst

As a Senior Technology & Cyber Risk Analyst at Citi, you will help safeguard the organization's technology environment by identifying, assessing, and mitigating technology and cyber risk across the business. Sitting within Citi's Operational Risk organization, you will work closely with technology and business teams to strengthen risk management practices and build organizational resilience. This role offers the opportunity to influence how Citi manages emerging technology and cyber threats at scale.

Responsibilities:

• Evaluate technology and cyber risk exposure across the business to confirm it remains within Citi's acceptable risk appetite.
• Partner with business and technology teams to understand their risk profile and embed practical risk mitigation measures.
• - Build strong working relationships with frontline technology and engineering teams (1LOD) across Wealth and Consumer tech to understand their architecture, priorities, challenges, and risk exposure.
• Advise stakeholders on risk mitigation strategies and control enhancements that strengthen technology and cyber resilience.
• Confirm that risk management activities align with internal policies, external regulations, and industry standards.
• Conduct regular technology and cyber risk assessments and document findings with clear recommendations for reducing exposure.
• Analyze data to spot emerging risk trends and deliver timely recommendations that reduce risk exposure.
• Report consistently to senior management on the status of technology and cyber risk assessments, highlighting key risks and areas of concern.

Required Qualifications & Skills:

• Bachelor's degree or equivalent practical experience.
• Minimum of 3 years of experience in technology risk, cyber risk management, information security, or a related IT field.
• Background supporting risk management, compliance, governance, or controls functions.
• Solid understanding of regulatory requirements, cyber security principles, strategies, and technologies.
• Working knowledge of IT systems, networks, cloud services, security infrastructure, and system vulnerabilities, along with exposure to enterprise risk frameworks, risk reporting tools, and risk types such as credit, market, and liquidity.
• Proven ability to exercise independent judgment, manage multiple initiatives, and meet deadlines in a fast-paced environment.
• Strong interpersonal and analytical skills to build cross-functional relationships, identify emerging risk trends, and make sound decisions under pressure while maintaining high integrity and professionalism.

• Fluent English communication skills (written and verbal), with the ability to articulate technical and risk concepts clearly to global stakeholders.

Beneficial Skills & Qualifications:

• Exposure to Wealth Management or Retail / Consumer Banking technology platforms from a 1st, 2nd, or 3rd Line of Defense (1LOD / 2LOD / 3LOD) risk, control, or audit perspective.
• Familiarity with technology risk and control frameworks such as NIST CSF, COBIT, ISO 27001, or FFIEC IT Examination Handbooks.
• Understanding of application security, third-party and vendor risk management, and technology change management processes.
• Experience with governance, risk, and compliance tools such as Archer or ServiceNow GRC for tracking risks, issues, and controls.
• Ability to translate complex technical information into clear communications for senior stakeholders and non-technical audiences, with strong attention to detail under tight deadlines.

By joining Citi Solutions Center Poland, you will not only be part of a business casual workplace with a hybrid working model (currently up to 2 days working at home per week), but also (potentially, subject to final offer) receive a competitive base salary and enjoy a whole host of additional benefits which can include:

• Employer paid Defined Contribution Pension Plan contribution of 6% of employee’s pensionable earnings (PPE Program)
• Employer paid Private Medical Care Package for employees and Private Medical Care Packages for certain family members available at preferential rates
• Employer paid Life Insurance Program for employees and Life Insurance for certain family members available at preferential rates
• Employee Assistance Program financed by Employer Paid Parental Leave Program (maternity and paternity leave; statutory and 2 weeks additional paid paternity leave
• Sport Card for employees subsidised via Social Benefits Fund and Sport Cards for certain family members available at preferential rates
• Additional benefits from Company’s Social Benefit Fund, in particular: Holidays Allowance, support for sport and cultural activities, team building events.
• Additional day off for volunteering
• Cafeteria/ flex benefit – a company benefits system which enables employees to select and purchase benefits offered by a provider and available for employees on the platform.
• Opportunity to receive an annual discretionary incentive award
• Special offers and discounts for employees

Alongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self every day. We want the best talent around the world to be energized to join us, motivated to stay, and empowered to thrive.

Sounds like Citi has everything you need? Then apply to discover the true extent of your capabilities.

Copy and paste the URL below into a new tab on your web browser to view the Remuneration Regulations extract: https://tbcdn.talentbrew.com/company/287/cms/v3/docs/policies/RemunerationRegulations-KeyProvisions-CitibankEurope_plc_05012025_A.pdf

• Supports technology and/or cyber risk assessments specifically within Wealth Management or US Consumer & Commercial Credit (USCC) technology platforms, including front-end client-facing systems, data management platforms, and core banking infrastructure.
• Supports 2nd Line of Defense oversight activities, including the review of technology risk metrics, Key Risk Indicators (KRIs), and control effectiveness monitoring across Wealth and USCC technology domains.
• Assists in the preparation of regular technology and cyber risk reporting packs, dashboards, and management information for senior leadership, covering Wealth and/or USCC technology risk themes.
• Develops foundational relationships with Wealth and USCC technology teams, operations, and product owners to build an understanding of end-to-end technology processes and associated risk exposures.

• Supports preparation of materials for governance forums, risk committees, and senior management briefings, including meeting minutes, action item tracking, and follow-up coordination.

------------------------------------------------------

Job Family Group:

------------------------------------------------------

Job Family:

------------------------------------------------------

Time Type:

------------------------------------------------------

Primary Location Full Time Salary Range:

------------------------------------------------------

Most Relevant Skills

------------------------------------------------------

Other Relevant Skills

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.