Senior Program Manager, Cybersecurity & Technology Risk

About Citi:

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.

Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

The Role:

The Senior Program Manager, Cybersecurity & Technology Risk is a strategic program leadership role accountable for driving the planning, governance, execution, and delivery of Citi's enterprise-wide Post Quantum Readiness Program. This individual will build and maintain the multi-year program plan, coordinate across Cyber, Technology, Infrastructure, Engineering, Architecture, Operations, and Business stakeholders, and manage critical dependencies with external vendors whose quantum roadmaps directly affect Citi's migration timeline. The role carries significant external visibility, including regular engagement with regulators such as the OCC, FRB, FDIC, FCA, Hong Kong Monetary Authority, and Monetary Authority of Singapore. Success in this position requires translating complex technical and cryptographic concepts into executive-ready governance reporting, risk assessments, and actionable roadmaps. This is a highly visible, cross-functional role that directly supports Citi's security posture, operational resilience, and regulatory standing as the organization accelerates its mobilization for Post Quantum migration.

Responsibilities

• Build and maintain the PQC Readiness multi-year program plan, including workstreams, migration phases and waves, milestones, critical path identification, and dependencies on vendors, platforms, and standards.
• Develop and communicate a risk-based, data-driven governance strategy for the Quantum Readiness Program in partnership with architecture, engineering, operations, and information security stakeholders. Maintain integrated roadmaps, execution strategies, and operating frameworks to support successful delivery.
• Run the program's operating process, including working group cadence, meeting management, and minutes circulation. Track decisions and escalation paths, and prepare materials for Senior and Executive Management reporting.
• Produce and maintain the single source of truth for program status, with consistent reporting on KPIs, KRIs, and critical success criteria for governance, leadership, internal audit, and regulators.
• Turn prioritized PQ readiness assessments into dated commitments from application and infrastructure owners. Track delivery against roadmaps and escalate issues and delays.
• Align sequencing across shared infrastructure and platforms, such as PKI, HSM (Hardware Security Module), and KMS (Key Management Services), so downstream teams are prepared. Proactively coordinate stakeholders, follow up on action items, and remove blockers.
• Track critical vendor PQC roadmaps and delivery dates using tools including Confluence and Jira. Fold vendor roadmap updates into program planning and escalate issues and delays.
• Coordinate activities across multiple projects and workstreams while managing competing priorities and resource constraints. Manage internal deadlines, deliverables, and planning for dependent work efforts.
• Engage regularly with internal teams and external parties to identify Quantum Readiness roadmap deficiencies and communicate impacts to overall program health. Respond to the increasing frequency of internal and external regulatory requests on program readiness and alignment.
• Facilitate the implementation of approved cyber security tools and identify new or improved security solutions or emerging technologies. Communicate changes to cyber security regulations and standards with business and program owners.
• Develop Corrective Action Plans for remediation gaps and monitored issues through to completion. Plan communications and training so teams understand what is required of them, when, and where to get help.
• Build internal relationships and drive program-level timelines and requirements across the Enterprise and globally.
• Appropriately assess risk when business decisions are made, with particular consideration for the firm's reputation. Drive compliance with applicable laws, rules, and regulations, and apply sound ethical judgment regarding personal conduct. Escalate, manage, and report control issues with transparency, and effectively supervise the activity of others, creating accountability with those who fail to maintain these standards.

Qualifications

• 6+ years' experience managing technology programs and/or large projects within highly regulated, enterprise and global environments.
• Technical PM experience within cybersecurity is highly preferred.
• Solid understanding of technologies where cryptography is applied, such as software, networking, identity systems, and data platforms.
• Understanding of cryptography, algorithms, and implementations, maintained and enhanced through ongoing research, self-study, and engagement.
• Enterprise and solution-oriented architectural experience.
• Ability to leverage Citi generative AI tools to accelerate data analysis and automate presentation creation, transforming complex datasets into polished, management-ready visual narratives.
• Strong verbal and written communication, diplomacy, and influencing skills are required.
• Experience negotiating with external parties, including suppliers and vendors, is a plus.

Education

• Bachelor's degree in Computer Science or equivalent relevant experience.
• Master's degree preferred.
• Relevant industry certifications like CAPM, PMP, PgMP, etc. are a plus.

This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.

#LI-MN1

------------------------------------------------------

Job Family Group:

Project and Program Management

------------------------------------------------------

Job Family:

Program Management

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Primary Location:

Jacksonville Florida United States

------------------------------------------------------

Primary Location Full Time Salary Range:

$103,920.00 - $155,880.00

In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.

------------------------------------------------------

Most Relevant Skills

Please see the requirements listed above.

------------------------------------------------------

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

------------------------------------------------------

Anticipated Posting Close Date:

Nov 12, 2026

------------------------------------------------------

Automated Processing and AI

We use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi.

Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.

Illinois residents – AI Notice and Right

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.
View Citi’s EEO Policy Statement and the Know Your Rights poster.