Cybersecurity & Infrastructure Senior Program Management Lead

The Cybersecurity & Infrastructure Senior Program Management Lead is responsible for leading the strategy, planning, governance, execution, and delivery of complex cybersecurity, infrastructure modernization, vulnerability management, patching, network security, operational resilience, and technology transformation programs. The role serves as a strategic partner to senior technology and cybersecurity leaders, driving initiatives that strengthen the firm's security posture, infrastructure health, technology currency, regulatory compliance, and enterprise risk management objectives.

This individual will lead cross-functional programs spanning Cybersecurity, Infrastructure, Network Engineering, Cloud, Architecture, Operations, Risk, and Business organizations to ensure successful execution of enterprise priorities. The role requires a combination of strategic thinking, technical knowledge, program leadership, stakeholder management, and executive communication skills to drive measurable business outcomes across a highly regulated and complex environment.

The successful candidate will possess deep experience managing enterprise-scale technology and cybersecurity initiatives, including infrastructure currency, vulnerability remediation, patch management, network security modernization, operational resilience, and technology risk reduction programs. 

Responsibilities

• Partner with senior leaders across Cybersecurity, Infrastructure, Engineering, Risk, Compliance, and Operations to establish priorities, resolve dependencies, and drive strategic alignment.
• Develop executive-level dashboards and reporting to provide transparency into program health, risk reduction, vulnerability remediation progress, infrastructure currency, and business outcomes.
• Lead infrastructure currency and technology lifecycle management initiatives, including operating system upgrades, hardware refreshes, software modernization, and technical debt remediation.
• Oversee program financials, including budget planning, forecasting, resource allocation, vendor management, and investment prioritization.
• Drive accountability across stakeholders for delivery commitments, remediation targets, regulatory obligations, and risk reduction objectives.
• Drive adoption of Artificial Intelligence (AI), automation, predictive analytics, and data-driven insights to improve program governance, risk management, executive reporting, operational efficiency, and decision-making.
• Identify opportunities to automate project management artifacts, executive reporting, risk tracking, and portfolio management processes.
• Facilitate the implementation of approved cyber security tools and identify and propose new or improved security solutions or emerging technologies.
• Develop and maintain integrated project roadmaps, execution strategies, governance models, and operating frameworks to support successful delivery.
• Establish and maintain portfolio governance processes to manage risks, dependencies, resource allocation, financial performance, and delivery outcomes across multiple strategic initiatives.
• Ensure projects are managed with a clear focus on business outcomes, critical success criteria (CSC), key risk indicators (KRI), measurable value realization, and executive reporting.
• Ensure Cyber Security compliance and seek opportunities to enhance the efficiency of Cyber Security policies and procedures.
• Coordinate activities across multiple projects, and workstreams while managing competing priorities and resource constraints.
• Identify significant Cyber Security threats and vulnerabilities, and define appropriate controls for discovered threats, documenting the business response.
• Communicate and discuss changes to cyber security regulations and standards with Business and Program owners.
• Manage program deadlines, deliverables, planning, budgeting, and policy formulation for the team, including short-term resource planning.
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards.
• Drive enterprise vulnerability management programs and remediation governance processes.
• Experience leading programs focused on operational resilience, business continuity, disaster recovery, platform recoverability, and technology resiliency.
• Proven ability to build consensus, influence decision-making, and drive alignment across senior technology, cybersecurity, infrastructure, and business stakeholders.
• Oversee vulnerability tracking, remediation planning, exception management, and executive reporting.
• Partner with technology teams to ensure timely remediation of high-risk vulnerabilities and adherence to remediation service level objectives (SLOs).
• Lead patch management governance across infrastructure, cloud, middleware, databases, operating systems, and applications.
• Monitor remediation trends, aging vulnerabilities, and risk reduction targets, escalating issues as appropriate.
• Lead cross-functional network security transformation initiatives, including network segmentation, firewall modernization, secure connectivity, Zero Trust adoption, and remediation of network-related security risks and technical debt.
• Provide regular updates to senior management and governance forums, escalating key risks, issues, dependencies, and strategic decisions requiring executive attention.

Qualifications

• 10+ years of relevant experience.
• In-depth knowledge across core security domains
• Professional cyber security certifications (such as CISSP, CISM, GCIH) are highly desirable.
• Experience implementing governance frameworks, executive reporting processes, and project management best practices.
• Experience leveraging Artificial Intelligence, automation, analytics, and modern reporting technologies within project and portfolio management functions.
• Excellent communication, negotiation, leadership, and relationship management skills.
• Experience supporting regulatory, audit, risk, and compliance remediation initiatives.
• Understanding of network security technologies including firewalls, IDS/IPS, segmentation, secure remote access, and Zero Trust principles.
• Proven ability to deliver cross-functional transformation programs involving Cybersecurity, Infrastructure, Engineering, and Operations organizations.
• Strong understanding of Cybersecurity, Technology Risk Management, Infrastructure Engineering, Technology Operations, Cloud Technologies, Network Security, Zero Trust Architecture, Operational Resilience, Infrastructure Lifecycle Management, Enterprise Governance, and Enterprise Architecture.
• Strong understanding of vulnerability management frameworks, CVSS scoring methodologies, remediation service level objectives (SLOs), risk acceptance processes, and cyber risk reduction metrics.
• Experience leading large-scale cybersecurity remediation, vulnerability reduction, infrastructure currency, operating system upgrade, technology lifecycle management, and regulatory compliance programs..
• Experience managing multi-million-dollar portfolios and complex cross-functional delivery organizations.
• Demonstrated ability to influence senior executives and drive outcomes across organizations without direct authority.
• Strong financial management skills, including budgeting, forecasting, resource planning, and benefits realization.
• Experience presenting to senior leadership, executive governance forums, operating committees, and regulatory stakeholders.

Education

• Bachelor’s degree in information technology, Computer Science, Engineering, Cybersecurity, Business Management, or a related discipline.
• Master's Degree preferred (MBA, Information Systems, Cybersecurity, Data Analytics, Artificial Intelligence, or related field).
• PMP, PgMP, CISM, CISSP, SAFe, Agile, or equivalent certifications preferred.

------------------------------------------------------

Job Family Group:

------------------------------------------------------

Job Family:

------------------------------------------------------

Time Type:

------------------------------------------------------

Primary Location:

------------------------------------------------------

Primary Location Full Time Salary Range:

In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.

------------------------------------------------------

Most Relevant Skills

------------------------------------------------------

Other Relevant Skills

------------------------------------------------------

Anticipated Posting Close Date:

------------------------------------------------------

Automated Processing and AI

We use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi.

Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.

Illinois residents – AI Notice and Right

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.