Senior Intelligence Analyst – Assistant Vice President

Discover your future at Citi

Working at Citi is far more than just a job. A career with us means joining a team of approximately 219,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Job Overview

Are you looking for a career move that will place you in a global financial organization? Then bring your skills in fraudanalysis, cyber threat intelligence, financial crime investigation and communication to Citi’s CSIS Team.

By joining Citi, you will become part of a global organization whose mission is to serve as a trusted partner to our clients by responsibly providing financial services that enable growth and economic progress.

Team/Role Overview

Citi Security and Investigative Services (CSIS) is a full-service security and investigative team that protects the assets, integrity, and reputation of Citi and its clients as the industry-leading provider of security, investigations, and intelligence. The CSIS Advanced Analytics and Cyber OSINT program delivers timely, actionable intelligence to Citi stakeholders through collection and analysis using both open-source and internal data sources, supporting complex financial crime investigations, cyber-enabled fraud matters, and high-risk security events. The program drives efficiencies through the creation, integration, and deployment of custom analytical tools and intelligence capabilities into the hands of analysts and investigators across the enterprise.

The Senior Intelligence Analyst — Business Email Compromise & Wire Fraud is an intermediate level position within the CSIS Advanced Analytics and Cyber OSINT program, specializing in the detection, analysis, and disruption of business email compromise (BEC) schemes and wire fraud operations targeting Citi and its clients. The incumbent will serve as a subject matter expert on BEC actor tradecraft, wire fraud typologies, money movement patterns, and the industries and client segments most frequently targeted by financially motivated threat actors. This role bridges the disciplines of cyber threat intelligence, financial crime analysis, and investigative support — producing actionable intelligence that directly informs fraud prevention, client protection, and law enforcement referral efforts.

What we can offer you

By joining Citi Hungary, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive compensation package and enjoy a whole host of additional benefits that support you (and your family) to be well, live well and save well:

• Cafeteria Program
• Home Office Allowance (for colleagues working in hybrid work models)
• Paid Parental Leave Program (maternity and paternity leave)
• Private Medical Care Program and onsite medical rooms at our offices
• Pension Plan Contribution to voluntary pension fund
• Group Life Insurance
• Employee Assistance Program
• Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
• Flexible work arrangements to support you in managing work - life balance
• Career progression opportunities across geographies and business lines
• Socially active employee communities with diverse networking opportunities

Alongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self every day. We want the best talent around the world to be energized to join us, motivated to stay, and empowered to thrive.

• 5+ years of experience in a combination of cyber threat intelligence, financial crime investigation, fraud analysis, or law enforcement roles with a focus on BEC, wire fraud, or cyber-enabled financial crime. Prior experience in a financial institution, government agency, law enforcement, or financial intelligence unit (FIU) environment is strongly preferred.
• Bachelor’s degree (or equivalent experience) required; advanced degrees are welcomed, preferably in a STEM major, computer science, cyber security, or cyber technology.
• Certifications from EC-Council, GIAC, (ISC)² [CISSP, C/EH, GCIA, CCNA] or relevant technical or specialty areas are a plus, or willingness to earn within 12 months of joining.
• Subject matter expertise in business email compromise — including vendor email compromise (VEC), CEO fraud, payroll diversion, real estate wire fraud, and invoice manipulation schemes — with a thorough understanding of actor tactics, techniques, and procedures at each stage of the attack lifecycle.
• Strong understanding of the industry’s most frequently targeted by BEC actors, including real estate and title companies, legal firms, healthcare, manufacturing, construction, government contractors, and financial services, with the ability to tailor intelligence products to sector-specific risk profiles.
• Proficiency in open-source intelligence (OSINT) techniques including domain and email header analysis, WHOIS and passive DNS investigation, social media intelligence, dark web monitoring, and fraudulent infrastructure identification.
• Experience with link analysis platforms such as Palantir, Maltego, or i2 Analyst's Notebook to map actor networks, financial flows, and entity relationships across complex multi-jurisdictional cases.
• Working knowledge of financial crime typologies including trade-based money laundering, layering techniques, and the use of cryptocurrency exchanges and peer-to-peer platforms to convert and obscure BEC proceeds.
• Experience with scripting languages such as Python or similar tools for automating intelligence collection, data enrichment, and pattern analysis across large datasets.
• Excellent written and verbal communication skills, with demonstrated ability to produce clear, concise, and well-structured intelligence products for both technical investigators and non-technical business stakeholders.
• Proven analytical skills including the ability to synthesize large volumes of structured and unstructured data, identify meaningful patterns, and draw sound, evidence-based conclusions under time pressure.
• Proven relationship management and influencing skills, with experience collaborating across fraud operations, compliance, legal, technology, and external law enforcement or government partners.