Total 5 quality assurance control job vacancies in Legal / Public / Security category in city of london london ec3n 1ag

About our Team:

The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients', our revenue, our employees and our proprietary data. We manage information security as one end-to end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.

Citi has an extensive and robust AI program, with strong global partnerships and business activities in progress.  We view Generative AI as a significant opportunity, one we want to move quickly and embrace, but also one we want to embed security principles and engineering excellence into early. 

The Generative AI Security Assurance Analyst  reports into the CISO organization with dedicated functional alignment to Citi’s generative AI enablement group to establish and maintain security assurance for company's adoption of generative AI technology.  You will be responsible for analysis of generative AI usage  and manage the GRC (governance, risk, and compliance) functions related to generative AI implementation, ensuring compliance with Citi as well as  global regulations.

Key Responsibilities -

Governance, Risk and Compliance (GRC)

• Develop, implement, and manage  a comprehensive security assurance measures for generative AI usage across the company.
• Provide thought leadership and creativity to mature generative AI security governance embedding into our existing cyber risk appetite framework
• Stay abreast of relevant global regulations, industry standards, executive memos, analyst views, and technology trends.
• Provide expertise and guidance on the interpretation and implementation of regulatory requirements to CISO functions.
• Drive security assurance maturity through relevant CISO governance framework, policy, standard, and metrics development
• Support business during regulatory examinations, and projects ensuring alignment with regulatory expectation
• Perform security assessments of technology and security solutions enabling generative AI usage across Citi
• Develop, and manage security guardrails for generative AI implementations
• Identify, track, and manage information security issues. Provide remediation/mitigation recommendations and oversee plans to ensure that generative Ai based implementations comply with Citi standards as well as meet regulatory requirements. 
• Support Global Information Security policies, standards, and initiatives development and implementation by representing in different Citi action groups such as Delegated Action Groups (DAG).
• Partner with CISO GRC in both leading and supporting capacities to manage generative AI assurance function
• Perform  program , and project management functions for CISO generative AI use cases. Ensure successful execution of the various projects under their remit
• Implement, Monitor, and Challenge KRIs and KPIs to help drive program performance
• Interface with CISO functions  (Architecture, engineering. SecOps, etc.) technology, cyber and operational risk management, Auditors, Regulators, and other stake holders to communicate and manage program/project performance
• Build internal and external networks to ensure alignment across programs, industry best practices, and to maintain current knowledge regarding AI/ML/Gen AI information security/cyber developments

What you will bring

Essential Experience

• Extensive Information Security assurance/GRC experience in is required
• Proven program/project management experience for is required.
• Good understanding  of information  security, AI/Machine Learning/generative AI  or data science is required
• Experience or knowledge of business applications leveraging generative Ai is recommended
• Demonstrated  knowledge of software development processes (SDLC / Agile / Iterative / DevOps)
• A demonstrated knowledge of information security standards, rules and regulations related to information security and data confidentiality and other various security standards and policies.
• Experience interfacing with regulators and internal audit is required
• Ability to keep up to date with technology and security.

Leadership

• Good leadership, strategic thinking, and large-scale planning abilities.
• Able make informed decision and appropriate adjustments.
• Good interpersonal and communication skills with the ability to influence at all levels of the organization, while being able to simplify complex IS topics
• Ability to operate effectively across a highly matrixed, global business environment.
• Ability to apply a broad and comprehensive understanding across multiple functional areas.
• Strong work ethic, and an excellent use of discretion and judgment.
• Ability to organize, prioritize, and lead multiple deliverables simultaneously across a large, global corporate environment.
• Excellent problems solving abilities and analytical skills

Bonus points for

• Demonstrated experience with cyber engineering and operations, which could include DevSecOps and MLSecOps is a plus

Education:

• Bachelor’s / Masters degree/University degree or equivalent experience performing a similar role.

What we’ll provide you

By joining Citi London, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive base salary (which is annually reviewed), and enjoy a whole host of additional benefits such as:

• 27 days annual leave (plus bank holidays)
• A discretional annual performance related bonus
• Private Medical Care & Life Insurance
• Employee Assistance Program
• Pension Plan
• Paid Parental Leave
• Special discounts for employees, family, and friends
• Access to an array of learning and development resources
   

Alongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self, every day. We want the best talent around the world to be energized to join us, motivated to stay and empowered to thrive.
 

#LI-AS1

-------------------------------------------------

Job Family Group:

-------------------------------------------------

Job Family:

------------------------------------------------------

Time Type:

------------------------------------------------------

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the "EEO is the Law" poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting

Control Risks is currently looking for an experienced Security Director to be embedded with our client, a large multinational company, based in Mindanao, Philippines. This role will play a key part in the ongoing development of the client’s holistic security programme.

The Security Director will lead the security function and assume responsibility for the delivery of the security programme specific to the client's operations. The Security Director is tasked with the development of the security plan, which will assess threats, risks and resources. They will also coordinate security and incident training for local security officers. The Security Director will work closely with leaders from across the business, including Supply Chain, HR, Legal, IT, and Compliance areas. Effective engagement with third party security providers and government agencies is also required.

This position will be hired as an initial 1-year contract, with scope for further extension.

Responsibilities will include:

• Work with leadership team to analyse security threats and risks to the client's people and business. Implement security mitigation plans and establish relevant countermeasures. Escalate higher-level risks as required.
• Work with relevant teams to communicate security advice to travellers operating in high-risk locations.
• Work with business leaders to develop Incident Management plans. Support implementation of incident management framework.
• Oversee and ensure proper performance of the third party security guard companies engaged by the client.
• Create/update the security framework and ensure it is applied effectively.
• Conduct security risk assessments to validate effectiveness’ of security controls (people, processes and technology).
• Lead the implementation of effective and cost-efficient holistic security solutions.
• Conduct a physical security Risk Assessment for new sites or post major refurbishment, use or occupancy change, and major change to threat assessment.
• Understand and apply the full range of corporate investigative capabilities, whilst ensuring their lawful application.
• Coordinate and deliver security capability training required by employees, security teams and third-party partners.
• Possess contractual assessment skills for the implementation and review of security contracts.
• Prepare reports including security incident reporting, intelligence briefings, threats assessments and investigative reports.
• Utilise an active regional security network to share security information, trends and evolving operational practice. Participate in industry forums and understand emerging security technologies.

• 10+ years' experience in corporate security roles.
• Experience in a significant leadership role.
• Experience working within large complex corporate environments
• Strong English language skills and the ability to develop influential relationships with stakeholders at all levels of an organisation.
• Proficient IT (Microsoft Suite) skills.

Desired:

• Experience in developing and delivering training
• Experience working in the Philippines with insight into local working practices and cultures.

• Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.
• We operate a discretionary global bonus scheme that incentivises, and rewards individuals based on company and individual performance.
• Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.
• As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process.

The Opportunity

Our work couldn't be more important and is of enormous significance to the security of our nation's democracy. It is work that enables the UK Parliament to run smoothly, function efficiently and operate transparently, and when you join us in this exciting and unique position, you'll be ready to hit the ground running as you learn new skills, develop your expertise and increase your knowledge. This is a role you can make your own, and through which you'll be able to build an exciting career with an ambitious and innovative team.

Working with the Head of Information Security Risk, it'll be your job to keep information security policies and procedures under review, and ensure new and evolving solutions have the appropriate information security accreditation. But your vital work won't stop there. Among your other tasks we'll also expect you to:

• work across Parliament to ensure assurance activities are incorporated into the programme delivery schedules
• act as a project lead for Information Security in providing advice to the business on information security matters and assurance processes
• identify, record and manage information security risks across Parliament, liaising with relevant stakeholders and escalating any issues
• manage the outcome of the accreditation by maintaining a record of any risks, and ensure any remediation actions are performed quickly and efficiently
• support the development and maintenance of assurance policies and procedures, and ensure these are aligned with other information compliance requirements
• develop, implement and evaluate opportunities to increase staff awareness of information assurance processes

What You Need

You need to be ambitious, creative and willing to learn. Although this role would be ideal for someone who wants to build their career, we'll expect you to have some skills already in place. So if you possess experience of taking a lead role in information security with a large organisation, and addressing complex challenges and managing any associated risks, then we want to hear from you. You should also have:

• experience of applying sound professional judgment in making decisions based on analysing relevant facts from complex data
• the ability to build excellent working relationships with people, and the skills to influence and persuade a wide range of stakeholders
• the ability to engage positively in discussions while taking account of other peoples' views, and the confidence to challenge and negotiate when you have to
• superb communication skills including the ability to explain complex issues to stakeholders in a way that is understandable and meaningful
• the ability to convey important messages and key decisions accurately, and ensure they are understood and acted upon
• highly effective organisational skills with the ability to identify and adapt to changing priorities
• the ability to work under pressure to tight deadlines and deliver to agreed targets
• the skills to compile and deliver briefings and targeted guidance to different audiences
• experience of working in a team and the ability to supervise, motivate and lead people to high professional standards while promoting a culture of diversity and inclusion
• the ability to pass security clearance, backed by the right to work in the UK

About The Team

You'll be joining a small, growing team that is committed to improving information security, mitigating a wide range of risks and maintaining security standards of the highest quality. It's pro-active and flexible, and dedicated to building a brand-new culture that will make a real difference to the way our organisation functions. You will play a key part in shaping the team and our service offering. Working alongside a wide variety of stakeholders as it builds information security across Parliament, this is an innovative team with a broad outlook and ambitious strategy. We're dedicated to building our Workplace Equality Network, and with a major focus on Diversity, Equality and Inclusion, all PDS's teams are committed to making Parliament a great place for everyone to work.

About Us

UK Parliament is steeped in history and tradition. It is an important part of UK life and we need to ensure as many people as possible can engage with its work. This is why we are at the start of a huge transformation programme powered by technology. The Parliamentary Digital Service (PDS) works with the House of Commons and the House of Lords with all their IT and digital needs. We are here to realise the digital ambitions of a modern Parliament and welcome you to join us in building a digital democracy.

Our Package

Please refer to our Candidate Information Pack for a full list of our benefits which include:

• up to 35 days annual leave in addition to bank holidays
• generous maternity pay policy up to 6 months full pay
• great pension scheme options (contributory and non-contributory)
• on-site subsidised gym, nursery, catering, post office, travel office and GP
• flexible options including hybrid working and family friendly policies

How To Apply

Please make sure you're clear on the requirements of the role. These can be found in the Job Description and Candidate Information Pack. You will need to upload a CV and show how you meet criterions 1, 2, and 3. Our application process is anonymous, so please remove any personal information from your CV.

Apply By:

Interviews: TBC

Format: Presentation + Panel Interview (Remote)

Our Culture

For our people, we provide an amazing opportunity to bring their talents to an institution that sits right at the heart of society in the UK. We are helping to change UK Parliament and strengthen democracy. What matters here is your potential for growth and your commitment to playing your part in our ongoing success.

We are passionate about providing an environment which promotes inclusion, diversity and equality. Regardless of your age, gender, ethnicity, beliefs or any of the other things that make you, you. We welcome applications from people who feel under-represented in the workforce. This includes those who may feel disadvantaged because of their socioeconomic circumstances.

Our mission is to support a thriving parliamentary democracy - this means being ready to carry out our essential functions to support colleagues deliver excellent services on the Parliamentary Estate and remotely. The balance of location varies according to the requirements of each job role, including some roles which can only be carried out from the Parliamentary Estate. The usual working arrangements for teams in the Digital Service are set out in team hybrid working plans and are by agreement with the managers and leaders of those teams. All teams are required to attend the estate for part of the time to meet business requirements and for team communication, learning and training. Please refer to the hybrid working plan contained in the candidate pack for more information