Senior Program Manager, Cybersecurity & Technology Risk

Citibank•Jacksonville, FL

12h

About The Position

The Senior Program Manager, Cybersecurity & Technology Risk is a strategic program leadership role accountable for planning, governance, execution, and delivery of Citi's enterprise-wide Post Quantum Readiness Program. The role builds and maintains a multi-year program plan and coordinates across Cyber, Technology, Infrastructure, Engineering, Architecture, Operations, and Business stakeholders, as well as external vendors whose quantum roadmaps affect Citi's migration timeline. The position has significant external visibility, including regular engagement with regulators such as the OCC, FRB, FDIC, FCA, Hong Kong Monetary Authority, and Monetary Authority of Singapore. It requires translating technical and cryptographic concepts into executive-ready governance reporting, risk assessments, and actionable roadmaps. The role supports Citi's security posture, operational resilience, and regulatory standing as the organization mobilizes for Post Quantum migration.

Requirements

At least 6 years of experience managing technology programs and/or large projects in highly regulated, enterprise, and global environments.
Solid understanding of technologies where cryptography is applied, such as software, networking, identity systems, and data platforms.
Understanding of cryptography, algorithms, and implementations, maintained and enhanced through ongoing research, self-study, and engagement.
Enterprise and solution-oriented architectural experience.
Ability to leverage Citi generative AI tools to accelerate data analysis and automate presentation creation, transforming complex datasets into polished, management-ready visual narratives.
Strong verbal and written communication, diplomacy, and influencing skills.
Bachelor's degree in Computer Science or equivalent relevant experience.

Nice To Haves

Technical project management experience within cybersecurity.
Experience negotiating with external parties, including suppliers and vendors.
Master's degree.
Relevant industry certifications such as CAPM, PMP, or PgMP.

Responsibilities

Build and maintain the Post Quantum Cryptography (PQC) Readiness multi-year program plan, including workstreams, migration phases and waves, milestones, critical paths, and dependencies on vendors, platforms, and standards.
Develop and communicate a risk-based, data-driven governance strategy for the Quantum Readiness Program with architecture, engineering, operations, and information security stakeholders.
Maintain integrated roadmaps, execution strategies, and operating frameworks to support successful program delivery.
Run the program operating process, including working-group cadence, meeting management, and circulation of minutes.
Track decisions and escalation paths, and prepare materials for senior and executive management reporting.
Maintain the single source of truth for program status, including consistent reporting on KPIs, KRIs, and critical success criteria for governance, leadership, internal audit, and regulators.
Turn prioritized PQ readiness assessments into dated commitments from application and infrastructure owners; track delivery against roadmaps and escalate issues and delays.
Align sequencing across shared infrastructure and platforms, including PKI, HSM, and KMS, to prepare downstream teams.
Coordinate stakeholders, follow up on action items, and remove blockers.
Track critical vendor PQC roadmaps and delivery dates using tools such as Confluence and Jira; incorporate vendor updates into program planning and escalate issues and delays.
Coordinate activities across projects and workstreams while managing competing priorities and resource constraints.
Manage internal deadlines, deliverables, and planning for dependent work efforts.
Engage with internal teams and external parties to identify Quantum Readiness roadmap deficiencies and communicate impacts to overall program health.
Respond to internal and external regulatory requests concerning program readiness and alignment.
Facilitate implementation of approved cybersecurity tools and identify new or improved security solutions and emerging technologies.
Communicate changes to cybersecurity regulations and standards to business and program owners.
Develop Corrective Action Plans for remediation gaps and monitor issues through completion.
Plan communications and training so teams understand requirements, timing, and where to get help.
Build internal relationships and drive program-level timelines and requirements across the enterprise and globally.
Assess risk in business decisions, particularly in relation to the firm's reputation; drive compliance with applicable laws, rules, and regulations and apply sound ethical judgment.
Escalate, manage, and transparently report control issues, and supervise others' activities while creating accountability for maintaining standards.

Benefits

Medical coverage
Dental coverage
Vision coverage
401(k)
Life insurance
Accident insurance
Disability insurance
Wellness programs
Paid vacation
Paid sick leave
Paid holidays
Eligible employees may receive discretionary and formulaic incentive and retention awards.