About Citco:

Armed with superior services, smart people, and strong technology, we tackle our customers’ complicated challenges by developing sophisticated solutions driven directly by their demands. The result? Innovation that generates tangible value and makes a real difference for our clients and their companies.

Junior Information Systems Security Officer (Junior ISSO)

Reports to: Manager or Senior ISSO 

Role type: Permanent, Full‑time

Overview
Junior Information Systems Security Officers (Junior ISSO) will support access governance for production applications under Citco’s User Access Management (UAM) and Role‑Based Group (RBAG) process. The Junior ISSO will assist with access reviews, onboarding/offboarding of applications to Citco’s Intake/Outtake/RBAG process, monitoring production application access, and remediation activities while operating in a second‑line, check‑and‑challenge capacity.

Key responsibilities

• Support access governance processes: review access requests and approvals for production applications governed by Citco’s User Access Management and RBAG process.

• Assist with client access certification campaigns and review of AD security groups.

• Monitor application access records and escalate anomalies.

• Develop and run basic scripts or queries to detect access issues.

• Validate provisioning actions against approved access and liaise with provisioning teams to resolve discrepancies.

• Maintain accurate documentation for access controls and remediation activities.

• Support audit and compliance requests.

• Participate in onboarding new applications to Citco’s User Access Management and RBAG process.

• Attend meetings with business and technical stakeholders; capture actions and owners.

Required skills & experience

• Bachelor’s degree in Computer Science, Information Security, Information Systems, or equivalent experience preferred.

• Minimum 2 years’ experience in IT, IAM, access governance, or related operational roles (e.g., provisioning, service desk, systems support).

• Basic understanding of RBAC (Role‑Based Access Control) / RBAG (Role‑Based Access Group), the least‑privilege principle, and segregation of duties (SoD).

• Strong attention to detail, good documentation skills, and process orientation.

• Presentation skills — able to communicate clearly to technical and non‑technical audiences.

• Basic scripting or query skills (SQL, Python, or PowerShell, ACL) are desirable.

• Familiarity with IAM tools or access‑certification platforms is a plus.

• Team player — collaborative, flexible, and able to work effectively with cross‑functional teams.

• Demonstrated ability to operate in a second‑line assurance role.

• Good stakeholder and communication skills; ability to follow directions and escalate appropriately.

Certifications (Additional desirable skills)

• CIA, CRISC, CISSP, CISM, or other relevant security certifications.

Working hours / conditions

• Role requires shifting work hours to cover cross‑region support; flexibility for occasional early/late shifts or participation in an on‑call rota may be required.

May require participation in cross‑region meetings and occasional after‑hours support.