Cybersecurity & Infrastructure Senior Program Management Lead

Citibank•Irving, TX

14h

About The Position

The Cybersecurity & Infrastructure Senior Program Management Lead directs strategy, planning, governance, execution, and delivery for complex cybersecurity and infrastructure programs. These initiatives include infrastructure modernization and lifecycle management, vulnerability remediation, patch management, network security modernization, operational resilience, and technology transformation. The role partners with senior technology and cybersecurity leaders to strengthen security posture, infrastructure health, technology currency, regulatory compliance, and enterprise risk management in a highly regulated environment. The position leads cross-functional programs spanning Cybersecurity, Infrastructure, Network Engineering, Cloud, Architecture, Operations, Risk, and Business organizations. It develops integrated roadmaps, governance models, and operating frameworks; manages portfolio risks, dependencies, resources, budgets, and delivery outcomes; and provides executive reporting on program health, risk reduction, vulnerability remediation, infrastructure currency, and value realization. The role also promotes the use of AI, automation, predictive analytics, and data-driven insights in program and portfolio management. The successful candidate brings substantial experience leading enterprise-scale technology and cybersecurity initiatives, influencing senior stakeholders, and delivering measurable outcomes. Responsibilities include governance of vulnerability remediation and patching, network security transformation, infrastructure currency, operational resilience, financial management, and regulatory and risk remediation. The role also requires adherence to Citi policies and applicable laws and regulations, sound risk judgment, transparent escalation of control issues, and accountability for maintaining required standards.

Requirements

10 or more years of relevant experience.
In-depth knowledge across core security domains.
Experience implementing governance frameworks, executive reporting processes, and project management best practices.
Experience using AI, automation, analytics, and modern reporting technologies in project and portfolio management.
Excellent communication, negotiation, leadership, and relationship management skills.
Experience supporting regulatory, audit, risk, and compliance remediation initiatives.
Understanding of network security technologies, including firewalls, IDS/IPS, segmentation, secure remote access, and Zero Trust principles.
Proven ability to deliver cross-functional transformation programs involving Cybersecurity, Infrastructure, Engineering, and Operations organizations.
Strong understanding of cybersecurity, technology risk management, infrastructure engineering, technology operations, cloud technologies, network security, Zero Trust Architecture, operational resilience, infrastructure lifecycle management, enterprise governance, and enterprise architecture.
Strong understanding of vulnerability management frameworks, CVSS scoring methodologies, remediation service level objectives, risk acceptance processes, and cyber risk reduction metrics.
Experience leading large-scale cybersecurity remediation, vulnerability reduction, infrastructure currency, operating system upgrade, technology lifecycle management, and regulatory compliance programs.
Experience managing multi-million-dollar portfolios and complex cross-functional delivery organizations.
Demonstrated ability to influence senior executives and drive outcomes across organizations without direct authority.
Strong financial management skills, including budgeting, forecasting, resource planning, and benefits realization.
Experience presenting to senior leadership, executive governance forums, operating committees, and regulatory stakeholders.
Bachelor’s degree in information technology, Computer Science, Engineering, Cybersecurity, Business Management, or a related discipline.

Nice To Haves

Professional cybersecurity certifications such as CISSP, CISM, or GCIH.
Master’s degree, preferably an MBA or in Information Systems, Cybersecurity, Data Analytics, Artificial Intelligence, or a related field.
PMP, PgMP, CISM, CISSP, SAFe, Agile, or equivalent certifications.

Responsibilities

Partner with senior leaders across Cybersecurity, Infrastructure, Engineering, Risk, Compliance, and Operations to establish priorities, resolve dependencies, and align strategic initiatives.
Develop executive dashboards and reporting on program health, risk reduction, vulnerability remediation, infrastructure currency, and business outcomes.
Lead infrastructure currency and technology lifecycle initiatives, including operating system upgrades, hardware refreshes, software modernization, and technical debt remediation.
Manage program financials, including budgets, forecasts, resource allocation, vendor management, and investment prioritization.
Drive stakeholder accountability for delivery commitments, remediation targets, regulatory obligations, and risk reduction objectives.
Promote the use of AI, automation, predictive analytics, and data-driven insights to improve governance, risk management, reporting, operational efficiency, and decision-making.
Identify opportunities to automate project management artifacts, executive reporting, risk tracking, and portfolio management processes.
Facilitate implementation of approved cybersecurity tools and propose new or improved security solutions and emerging technologies.
Develop and maintain integrated project roadmaps, execution strategies, governance models, and operating frameworks.
Establish portfolio governance processes for risks, dependencies, resource allocation, financial performance, and delivery outcomes.
Keep projects focused on business outcomes, critical success criteria, key risk indicators, value realization, and executive reporting.
Ensure cybersecurity compliance and identify opportunities to improve the efficiency of cybersecurity policies and procedures.
Coordinate activities across multiple projects and workstreams while managing competing priorities and resource constraints.
Identify significant cybersecurity threats and vulnerabilities, define appropriate controls, and document the business response.
Communicate changes to cybersecurity regulations and standards to business and program owners.
Manage program deadlines, deliverables, planning, budgeting, policy formulation, and short-term team resource planning.
Assess risk in business decisions, protect the firm's reputation and assets, drive compliance with applicable laws and policies, exercise sound ethical judgment, and transparently escalate, manage, and report control issues.
Supervise the activity of others and create accountability for adherence to required standards.
Lead enterprise vulnerability management programs and remediation governance processes.
Lead programs focused on operational resilience, business continuity, disaster recovery, platform recoverability, and technology resiliency.
Build consensus, influence decisions, and align senior technology, cybersecurity, infrastructure, and business stakeholders.
Oversee vulnerability tracking, remediation planning, exception management, and executive reporting.
Partner with technology teams to remediate high-risk vulnerabilities promptly and meet remediation service level objectives.
Lead patch management governance across infrastructure, cloud, middleware, databases, operating systems, and applications.
Monitor remediation trends, aging vulnerabilities, and risk reduction targets, escalating issues as appropriate.
Lead network security transformation initiatives, including network segmentation, firewall modernization, secure connectivity, Zero Trust adoption, and remediation of network-related risks and technical debt.
Provide regular updates to senior management and governance forums, escalating key risks, issues, dependencies, and decisions requiring executive attention.

Benefits

Medical coverage
Dental coverage
Vision coverage
401(k)
Life insurance
Accident insurance
Disability insurance
Wellness programs
Paid vacation
Paid sick leave
Paid holidays
Discretionary and formulaic incentive and retention awards may be available to eligible employees.