Cyber Architect Req – C13 – Description The Cyber Architect is a mid-level professional position responsible for driving efforts to proactively drive secure-by-design and secure-by-default programs (on-prem & cloud) who will identify threats, risks, and security gaps, ensure building of sufficient security controls, and monitor to results for continuous improvement. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy and drive value for tech, business and external clients. Responsibilities: • Engage early with business and tech partners and ensure the inclusion of information security from inception of all software and solutions • Partner with solution architects to create secure-by-design architectures in accordance with secure architecture principles • Threat model and identify threats and security controls that can mitigate them • Complete Architecture Review Analysis (ARAs) on critical applications, identify security gaps, and ensure mitigation • Complete cloud architecture reviews for SaaS solutions and evaluate vendor designs and offerings • Serve as a subject matter expert on secure architecture patterns, recommended security solutions, API security, secure secret management, secure public cloud solutions, secure SaaS solutions • Threat model existing identified high risk use cases, and solution for compensating controls and mitigation • Participate in peer-reviews, engage in constructive dialog, critical thinking to drive the best value for clients • Actively engage in working groups to drive improvements to security policies, standards, procedures • Identify opportunities for improving maturity of security architecture • Be thought leaders for emerging technologies, best practices, industry standards and add to the shaping the future of cyber architecture • Identify and proactively work on opportunities which simplify, fix, and allow clients to thrive Qualifications: • 13+ years of relevant experience • Proficient in threat modeling • Proficient in cloud security – AWS, Azure, GCP • Proficient in API security, SOA-architecture, microservices • Critical thinking skills • Self-starter, analytical, and a problem-solver • Research skills and willingness to keep learning • Works with minimal supervision • Experienced in influencing peers, stakeholders, and management • Leads by example and strong work ethics • Clear and concise written and verbal communication • Proven influencing and relationship management skills Education: • Bachelor’s degree/University degree or equivalent experience • Master’s degree preferred • Security certifications preferred This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required. ------------------------------------------------------ Job Family Group: Technology ------------------------------------------------------ Job Family: Information Security ------------------------------------------------------ Time Type: Full time ------------------------------------------------------ Most Relevant Skills Please see the requirements listed above. ------------------------------------------------------ Other Relevant Skills For complementary skills, please see above and/or contact the recruiter. ------------------------------------------------------ Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi. View Citi’s EEO Policy Statement and the Know Your Rights poster.