Senior Program Manager, Cybersecurity & Technology Risk

Citi • Jacksonville, FL

1d • $103,920 - $155,880

About The Position

The Senior Program Manager, Cybersecurity & Technology Risk is accountable for planning, governing, executing, and delivering Citi’s enterprise-wide Post Quantum Readiness Program. The role builds and maintains a multi-year program plan and coordinates Cyber, Technology, Infrastructure, Engineering, Architecture, Operations, and Business stakeholders. It also manages dependencies on external vendors whose quantum roadmaps affect Citi’s migration timeline.

This highly visible, cross-functional position regularly engages with regulators, including the OCC, FRB, FDIC, FCA, Hong Kong Monetary Authority, and Monetary Authority of Singapore. The program manager translates technical and cryptographic concepts into executive-ready governance reporting, risk assessments, and actionable roadmaps. The role supports Citi’s security posture, operational resilience, and regulatory standing as the organization mobilizes for post-quantum migration.

Requirements

• At least 6 years of experience managing technology programs and/or large projects in highly regulated, enterprise, and global environments.
• Solid understanding of technologies where cryptography is applied, such as software, networking, identity systems, and data platforms.
• Understanding of cryptography, algorithms, and implementations, maintained and enhanced through ongoing research, self-study, and engagement.
• Enterprise and solution-oriented architectural experience.
• Ability to leverage Citi generative AI tools to accelerate data analysis and automate presentation creation, transforming complex datasets into polished, management-ready visual narratives.
• Strong verbal and written communication, diplomacy, and influencing skills.
• Bachelor’s degree in Computer Science or equivalent relevant experience.

Nice To Haves

• Technical project management experience within cybersecurity is highly preferred.
• Experience negotiating with external parties, including suppliers and vendors.
• Master’s degree preferred.
• Relevant industry certifications such as CAPM, PMP, or PgMP are a plus.

Responsibilities

• Build and maintain the PQC Readiness multi-year program plan, including workstreams, migration phases and waves, milestones, critical paths, and dependencies on vendors, platforms, and standards.
• Develop and communicate a risk-based, data-driven governance strategy with architecture, engineering, operations, and information security stakeholders; maintain integrated roadmaps, execution strategies, and operating frameworks.
• Run the program operating process, including working-group cadence, meeting management, minutes, decision tracking, escalation paths, and materials for senior and executive management reporting.
• Produce and maintain the single source of truth for program status, including consistent KPIs, KRIs, and critical success criteria for governance, leadership, internal audit, and regulators.
• Turn prioritized PQ readiness assessments into dated commitments from application and infrastructure owners, track delivery against roadmaps, and escalate issues and delays.
• Align sequencing across shared infrastructure and platforms such as PKI, HSM, and KMS so downstream teams are prepared; coordinate stakeholders, follow up on actions, and remove blockers.
• Track critical vendor PQC roadmaps and delivery dates using tools including Confluence and Jira, incorporate updates into program planning, and escalate issues and delays.
• Coordinate activities across projects and workstreams while managing competing priorities, resource constraints, deadlines, deliverables, and dependent work planning.
• Engage internal teams and external parties to identify roadmap deficiencies, communicate impacts to program health, and respond to internal and external regulatory requests concerning readiness and alignment.
• Facilitate implementation of approved cybersecurity tools, identify new or improved security solutions and emerging technologies, and communicate changes to cybersecurity regulations and standards to business and program owners.
• Develop Corrective Action Plans for remediation gaps and monitor issues through completion; plan communications and training so teams understand their responsibilities, timelines, and support resources.
• Build internal relationships and drive program-level timelines and requirements across the enterprise and globally.
• Assess risk in business decisions, considering the firm’s reputation; drive compliance with applicable laws, rules, and regulations; apply sound ethical judgment; and transparently escalate, manage, and report control issues.
• Effectively supervise the activity of others and create accountability for maintaining required standards.

Benefits

• Medical, dental, and vision coverage.
• 401(k).
• Life, accident, and disability insurance.
• Wellness programs.
• Paid time off, including planned time off (vacation), unplanned time off (sick leave), and paid holidays.
• Eligible employees may receive discretionary and formulaic incentive and retention awards.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior