Cybersecurity & Infrastructure Senior Program Management Lead

Citi • Irving, TX

2d • $169,600 - $254,400

About The Position

The Cybersecurity & Infrastructure Senior Program Management Lead leads the strategy, planning, governance, execution, and delivery of complex cybersecurity, infrastructure modernization, vulnerability management, patching, network security, operational resilience, and technology transformation programs. The role partners with senior technology and cybersecurity leaders to strengthen the firm's security posture, infrastructure health, technology currency, regulatory compliance, and enterprise risk management objectives.

The position leads cross-functional programs spanning Cybersecurity, Infrastructure, Network Engineering, Cloud, Architecture, Operations, Risk, and Business organizations. It calls for strategic thinking, technical knowledge, program leadership, stakeholder management, and executive communication skills to drive measurable business outcomes in a highly regulated, complex environment.

The successful candidate will bring deep experience managing enterprise-scale technology and cybersecurity initiatives, including infrastructure currency, vulnerability remediation, patch management, network security modernization, operational resilience, and technology risk reduction. The role also manages program financials, governance, delivery commitments, remediation targets, and executive reporting. It drives the use of AI, automation, predictive analytics, and data-driven insights in program and portfolio management.

Requirements

• 10+ years of relevant experience.
• In-depth knowledge across core security domains.
• Experience implementing governance frameworks, executive reporting processes, and project management best practices.
• Experience leveraging AI, automation, analytics, and modern reporting technologies within project and portfolio management functions.
• Excellent communication, negotiation, leadership, and relationship management skills.
• Experience supporting regulatory, audit, risk, and compliance remediation initiatives.
• Understanding of network security technologies, including firewalls, IDS/IPS, segmentation, secure remote access, and Zero Trust principles.
• Proven ability to deliver cross-functional transformation programs involving Cybersecurity, Infrastructure, Engineering, and Operations organizations.
• Strong understanding of Cybersecurity, Technology Risk Management, Infrastructure Engineering, Technology Operations, Cloud Technologies, Network Security, Zero Trust Architecture, Operational Resilience, Infrastructure Lifecycle Management, Enterprise Governance, and Enterprise Architecture.
• Strong understanding of vulnerability management frameworks, CVSS scoring methodologies, remediation service level objectives, risk acceptance processes, and cyber risk reduction metrics.
• Experience leading large-scale cybersecurity remediation, vulnerability reduction, infrastructure currency, operating system upgrade, technology lifecycle management, and regulatory compliance programs.
• Experience managing multi-million-dollar portfolios and complex cross-functional delivery organizations.
• Demonstrated ability to influence senior executives and drive outcomes across organizations without direct authority.
• Strong financial management skills, including budgeting, forecasting, resource planning, and benefits realization.
• Experience presenting to senior leadership, executive governance forums, operating committees, and regulatory stakeholders.
• Bachelor’s degree in information technology, Computer Science, Engineering, Cybersecurity, Business Management, or a related discipline.

Nice To Haves

• Professional cybersecurity certifications such as CISSP, CISM, or GCIH.
• Master's degree preferred (MBA, Information Systems, Cybersecurity, Data Analytics, Artificial Intelligence, or related field).
• PMP, PgMP, CISM, CISSP, SAFe, Agile, or equivalent certifications.

Responsibilities

• Partner with senior leaders across Cybersecurity, Infrastructure, Engineering, Risk, Compliance, and Operations to establish priorities, resolve dependencies, and drive strategic alignment.
• Develop executive-level dashboards and reporting on program health, risk reduction, vulnerability remediation, infrastructure currency, and business outcomes.
• Lead infrastructure currency and technology lifecycle initiatives, including operating system upgrades, hardware refreshes, software modernization, and technical debt remediation.
• Oversee program financials, including budget planning, forecasting, resource allocation, vendor management, and investment prioritization.
• Drive stakeholder accountability for delivery commitments, remediation targets, regulatory obligations, and risk reduction objectives.
• Drive adoption of AI, automation, predictive analytics, and data-driven insights to improve program governance, risk management, reporting, operational efficiency, and decision-making.
• Identify opportunities to automate project management artifacts, executive reporting, risk tracking, and portfolio management processes.
• Facilitate implementation of approved cybersecurity tools and identify and propose new or improved security solutions and emerging technologies.
• Develop and maintain integrated project roadmaps, execution strategies, governance models, and operating frameworks.
• Establish and maintain portfolio governance processes for risks, dependencies, resource allocation, financial performance, and delivery outcomes across strategic initiatives.
• Manage projects with a focus on business outcomes, critical success criteria, key risk indicators, measurable value realization, and executive reporting.
• Ensure cybersecurity compliance and seek opportunities to improve the efficiency of cybersecurity policies and procedures.
• Coordinate activities across projects and workstreams while managing competing priorities and resource constraints.
• Identify significant cybersecurity threats and vulnerabilities, define appropriate controls, and document the business response.
• Communicate changes to cybersecurity regulations and standards to Business and Program owners.
• Manage program deadlines, deliverables, planning, budgeting, policy formulation, and short-term team resource planning.
• Assess risk in business decisions, consider the firm's reputation and the safeguarding of Citi, its clients, and assets, drive compliance with applicable laws and policies, apply sound ethical judgment, and transparently escalate, manage, and report control issues; supervise others' activity and create accountability.
• Drive enterprise vulnerability management programs and remediation governance processes.
• Lead programs focused on operational resilience, business continuity, disaster recovery, platform recoverability, and technology resiliency.
• Build consensus, influence decisions, and drive alignment across senior technology, cybersecurity, infrastructure, and business stakeholders.
• Oversee vulnerability tracking, remediation planning, exception management, and executive reporting.
• Partner with technology teams to ensure timely remediation of high-risk vulnerabilities and adherence to remediation service level objectives.
• Lead patch management governance across infrastructure, cloud, middleware, databases, operating systems, and applications.
• Monitor remediation trends, aging vulnerabilities, and risk reduction targets, escalating issues as appropriate.
• Lead cross-functional network security transformation initiatives, including network segmentation, firewall modernization, secure connectivity, Zero Trust adoption, and remediation of network-related security risks and technical debt.
• Provide regular updates to senior management and governance forums, escalating key risks, issues, dependencies, and strategic decisions requiring executive attention.

Benefits

• Medical coverage
• Dental coverage
• Vision coverage
• 401(k)
• Life, accident, and disability insurance
• Wellness programs
• Paid time off, including vacation and sick leave
• Paid holidays
• Eligible employees may receive discretionary and formulaic incentive and retention awards

What This Job Offers

• Job Type: Full-time
• Career Level: Senior