Intelligence Intermediate Analyst

Citi Security and Investigative Services

Citi Security and Investigative Services (CSIS) is a full-service security and investigative team that protects the assets, integrity, and reputation of Citi and its clients. We accomplish this by offering in-house professional security services and independent investigations to clients across all of Citi's businesses and regions, and partnerships with other Citi business groups, law enforcement agencies, governments and industry counterparts.

CSIS Global Security and Intelligence Centers (GSIC):

CSIS has three main GSICs located in Tampa, London, and Singapore. All CSIS GSICs are responsible for the execution of four core programs, including:

CCTV/Alarm Monitoring and Response – provide comprehensive physical security monitoring for threats to the firm's assets, employees, and customers. GSICs monitor the access control system, intrusion detection and panic alarm systems for threats and use the systems and CCTV systems to initiate and coordinate a security response to security and safety incidents or crisis events. Threat Monitoring – execute disruptive, targeted and executive threat monitoring plans following the CSIS Intelligence Threat Monitoring Procedures. GSICs also engage and leverage the CSIS Strategic Intelligence team to enhance situational awareness of threats to Citi facilities and people, as well as context when dealing with disruptive events or crises. Workplace Violence Monitoring and Response – GSICs execute the CSIS verbal threats and workplace violence programs and serve as the primary intake utility for reporting of security threats and incidents by Citi employees, contractors and other stakeholders. GSICs record all incidents managed and produce ongoing and final reports on significant incidents. Traveler Assistance – GSICs execute the CSIS Traveler assistance program. This includes implementing travel risk management procedures to restricted destinations with guidance from the relevant security manager or Security Head of Cluster. This also includes monitoring travel to high-risk destinations and provide support and to account for travelers in the event of a disruptive safety events.

GSICs also provide Incident Response support to security managers and the CSIS Crisis Management Team, as well as disseminating approved mass-call solutions to provide instant notification of threats and response guidance to employees impacted by security and safety events.

The CSIS GSIC Intelligence Analyst role is responsible for executing threat intelligence monitoring and response, workplace violence, and traveler assistance program guidelines. As such, this role is required to maintain effective interaction models with all CSIS anchors to ensure timely incident notification and coordination.

This CSIS GSIC Intelligence Analyst role will be based in London and report directly to the CSIS GSIC London Manager, as well as coordinate with counterparts in Singapore and Tampa- via a "follow the sun" operating model.

Responsibilities:

• Execute threat intelligence monitoring and response, workplace violence, and traveler assistance day-to-day operations.
• Maintain effective interaction models with all CSIS anchors to ensure timely incident notification and coordination.
• Collaborate closely with CSIS Strategic Intelligence analysts to align intelligence collection and dissemination efforts.
• Function as a subject matter expert on physical security and broader geopolitical threats and deliver all-source intelligence analytical assessments to inform decision making. This includes proactively assessing threats that create a risk to the company, its employees, shareholders, assets and clients.
• Apply theory and methods to collect, organize, analyze, interpret, and summarize information to provide actionable intelligence and situational awareness to decision makers in line with CSIS Intelligence Governance documents (procedures, guidelines, and playbooks).
• Produce presentations and brief intelligence assessments to senior leadership and stakeholders as needed.
• Identify intelligence gaps and coordinate with relevant teams to effectively address these gaps.
• Maintain key CSIS GSIC performance indicators around productivity and risk management.
• Complete appropriate training in a timely manner and effectively implement knowledge acquired.
• Train and mentor others, including ongoing professional development.

Required Qualifications:

• Previous experience with private sector organization is preferred, including prior experience working as part of a globally and/or regionally dispersed team.
• Analytic experience related to intelligence analysis (private or government), geopolitical risk, cyber threat intelligence analysis, statistical/data analysis, or relevant experience in large and complex environments.
• Ability to conduct effective and combined qualitative and quantitative intelligence analysis to provide impactful findings and holistic understanding of threat issues.
• Knowledge of threat assessment and risk management strategies and familiarity with protective intelligence
• Ability to participate in high-stakes incident and crisis response efforts.
• Effective communication and coordination skills for cross-functional teams (IT, legal, compliance and risk management).
• Ability to provide professional briefing to executives, stakeholders, peer institutions and government agencies for threat intelligence sharing. military, law enforcement, or intelligence experience can be an asset, especially in protective security or counter-threat operations.
• Expertise in Windows and Microsoft Office products – Word, Excel, Outlook, & PowerPoint – and demonstrated creativity in use of these products to solve analytical problems.
• Excellent communication and presentation skills with the ability to communicate effectively through all levels of the organization.
• Able to work an occasional flexible schedule as intelligence needs or crisis response requires.
• This position requires a consistent work schedule during business hours, Monday through Friday, as well as working on rotating weekends with other team members. Flexibility may be required depending on business needs.

Desired Qualifications:

• 24/7 command center experience a plus, such as a Joint Intelligence Operations Center (JOIC), Security & Intelligence Operations Center (SIOC) or related command centers.
• Experience in security operations, technologies and incident response.
• Crisis response experience, coordinating with cross-functional teams and stakeholders to minimize the impact of incidents.
• Executive Protections intelligence support experience

Education:

• Minimum of a Bachelor's degree preferred, Master's a plus

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

Job Family Group:
Technology

Job Family:
Information Security

Time Type:
Full time

Most Relevant Skills
Please see the requirements listed above.

Other Relevant Skills
For complementary skills, please see above and/or contact the recruiter.

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.
If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review
Accessibility at Citi.
View Citi's EEO Policy Statement and the Know Your Rights poster.