The company provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.
As a bank with a brain and a soul, the company creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.
Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.
Responsibilities
The Cybersecurity Architect, PQC will report into the Senior Cryptography Expert as part of CISOs Cryptographic Security Center of Excellence. The person in this position will be supporting the company’s Quantum Readiness Program and the industry movement to Post-Quantum Cryptography (PQC). Expert senior stakeholder communication and diplomacy skills are required to guide, influence, and convince others whether they be colleagues in other areas or occasional external customers. This role brings a significant impact on the area through complex deliverables in terms of cryptographic reviews, structured migration/mitigation plans, and coordination with application owners and the Cryptographic Security Center of Excellence all to support the delivery of the company’s Quantum Readiness Program. The ideal candidate will provide advice and counsel related to the cryptographic technology or operations of the business. While this is an individual contributor Subject Matter Expert (SME) role, the position will work across all lines of business, all applications, and geographies. In addition, this role will face-off to external bodies & groups dealing with cryptographic-related efforts such as NIST, BPI, ETSI, CABForum, PKI Consortium and local regulators.
Operate as a Subject Matter Expert on Traditional and Post-Quantum Cryptography algorithms, practices, and use cases.
Support the company's Quantum Readiness Program to ensure the company's data is protected from cryptographically relevant quantum computing threats.
Co-own the PQC readiness view of the cryptographic inventory. Reconcile inventory tool outputs with discovery tool outputs to reduce or eliminate manual enrichment required for PQC reporting.
Provide support and effective challenge to business and technology representatives and leadership on the secure implementation of cryptography.
Demonstrate deep understanding of practical cryptography and the impacts and considerations of migrating to post-quantum use cases.
Deliver professional presentations on emerging cryptography trends and key topics, tailoring business-impact messaging to different levels of expertise and leadership.
Play a key role in developing and communicating a risk-based, data-driven governance strategy and roadmap for the company's Quantum Readiness Program, in partnership with architecture, engineering, operations, information security officers, and other stakeholders.
Provide technical expertise in symmetric and asymmetric encryption, digital signatures, hashing, Distributed Ledger Technology (DLT), and related key and certificate management concerns.
Identify tools needed for cryptography, key, and certificate governance. Lead proofs of concept (PoCs) and oversee implementations as needed.
Work with application, infrastructure, architecture, and engineering teams to translate system and business requirements into implementation requirements, helping to embed PQC and crypto-agility requirements into existing roadmaps, technology refresh, and modernization efforts.
Build internal relationships and help drive program-level timelines and requirements across the enterprise globally.
Participate in new product and vendor assessments and develop PoCs and trials to support deployment and adoption decisions.
Partner with the company's Third-Party Risk Management and Supplier teams to assess vendor PQC roadmaps. Ensure PQC requirements are incorporated into contracts and renewals.
Establish additional reporting and metrics, including KPIs and KRIs, for governance, senior leadership, internal audit, and regulatory reporting.
Monitor NIST, IETF, CNSA, regulatory, and industry developments to determine the impact of these developments on internal guidance and program timelines.
Respond to the internal and external/regulatory requests regarding program readiness and alignment.
Requirements
6+ years' experience in cybersecurity, cryptography, or a control-related function at enterprise organizations with knowledge and/or prior consulting support of Post-Quantum migration strategies and timelines.
Ability to architect PQC deployments within existing infrastructure use cases, e.g. PKI, ATM, Payments and hardware components, e.g. HSMs, Load Balancers, Network Devices, and embedded endpoints.
Experience working with 3rd party / vendor tools and applications with respect to their cryptographic support and upgrade pathways.
Working knowledge of public key infrastructure (PKI), application and data security, symmetric encryption systems, and implementation of these.
Expert diplomacy skills with the ability to guide, influence, and convince colleagues across the global organization with engagement of both technical and non-technical stakeholders
Strong understanding of operating systems, network security infrastructure, and one or more scripting languages (e.g. Python, bash, etc.).
Strong understanding of AI capabilities and utilization. Able to leverage the company's generative AI tools to accelerate deliverables.
Prior Enterprise systems implementation and / or migration and strategy development experience a plus.
Solid understanding of cryptography, algorithms, and implementations & maintains/enhances knowledge through research, self-study and engagement.
Solid understanding of technologies where cryptography is leveraged & implemented such as software, networking, identity systems, and data platforms.
Experience with public cloud technologies and their use of cryptography and key management.
Education
Bachelor's degree in Computer Science or equivalent relevant experience.
Master's degree preferred.
This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.
In addition to salary, the company’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. The company offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. The company also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding the company employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.
We use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at the company.
Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.