You and the process

With a person
Anna, in-house recruiter
9 years hiring engineers
30 minutes with a real recruiter
They read your CV with you, on a call, and say where the offers are being lost.
Didn’t find what you were looking for? Tell us what to build
Citi

Cybersecurity & Infrastructure Senior Program Management Lead

  • Hybrid
  • 6+ years

Salary

$169,600/ year

AI summary

For members

The whole posting in a few lines. Sign up to read it here and on every role you open.

Sign Up to Read

Description

The role leads planning, governance, execution and delivery of large cybersecurity and infrastructure programs, covering modernization, vulnerability management, patching, network security, operational resilience and technology transformation.

You advise senior technology and security leaders and push initiatives that improve the company's security posture, infrastructure health, technology currency, regulatory compliance and enterprise risk control.

The role sits in the Digital Technical Program Management group within Technology. You coordinate work across cybersecurity, infrastructure, network engineering, cloud, architecture, operations, risk and business teams to meet enterprise priorities in a heavily regulated setting.

You bring experience running enterprise-scale initiatives in infrastructure currency, vulnerability fixes, patching, network hardening, resilience and risk reduction.

Responsibilities

  • Lead vulnerability management, remediation governance and patch management across infrastructure, cloud, middleware, databases, operating systems and applications.
  • Lead network security transformation work, including segmentation, firewall modernization, secure connectivity, Zero Trust adoption, and fixing network-related risks and technical debt.
  • Lead infrastructure currency and lifecycle work: operating system upgrades, hardware refreshes, software modernization and technical debt cleanup.
  • Build and run portfolio governance: roadmaps, execution strategies, governance models and operating frameworks, plus tracking of risks, dependencies, resourcing and delivery across several initiatives.
  • Own program finances, including budgets, forecasts, resourcing, vendor management and investment priorities.
  • Build executive dashboards and reports on program health, risk reduction, remediation progress, infrastructure currency and business results.
  • Keep every workstream tied to business outcomes, using critical success criteria (CSC), key risk indicators (KRI) and measured value.
  • Track remediation trends and aging vulnerabilities, work with technology teams on timely fixes for high-risk issues within remediation service level objectives (SLOs), and manage exceptions.
  • Work with senior leaders in security, infrastructure, engineering, risk, compliance and operations to set priorities, clear dependencies and align direction.
  • Hold owners accountable for delivery dates, remediation targets, regulatory duties and risk goals.
  • Drive use of AI, automation, predictive analytics and data insights in governance, risk management, reporting and decisions, and find ways to automate project artifacts, reporting, risk tracking and portfolio processes.
  • Support rollout of approved security tools and propose improved or new security solutions and emerging technologies.
  • Keep cyber compliance on track and improve the efficiency of security policies and procedures.
  • Identify major threats and vulnerabilities, define controls for them, and document the business response.
  • Brief business and program owners on changes to cyber regulations and standards.
  • Coordinate parallel projects and workstreams while balancing competing priorities and limited resources. Manage team deadlines, deliverables, budgets, policy drafting and short-term resource plans.
  • Lead programs on operational resilience, business continuity, disaster recovery, platform recoverability and technology resiliency.
  • Assess risk in business decisions with attention to the company's reputation and to protecting clients and assets. Ensure compliance with laws, rules and policy, escalate and report control issues openly, and hold people accountable for these standards.
  • Report regularly to senior management and governance forums, escalating risks, issues, dependencies and decisions that need executive input.

Requirements

  • You have 10+ years of relevant experience.
  • You have in-depth knowledge across core security domains.
  • You have built governance frameworks, executive reporting processes and project management practices.
  • You have used AI, automation, analytics and modern reporting tools in project and portfolio management.
  • You communicate clearly, negotiate well, lead teams and manage relationships effectively.
  • You have supported regulatory, audit, risk and compliance remediation work.
  • You understand network security technology, including firewalls, IDS/IPS, segmentation, secure remote access and Zero Trust principles.
  • You have delivered cross-functional transformation programs involving cybersecurity, infrastructure, engineering and operations.
  • You have a strong working knowledge of cybersecurity, technology risk management, infrastructure engineering, technology operations, cloud, network security, Zero Trust architecture, operational resilience, infrastructure lifecycle management, enterprise governance and enterprise architecture.
  • You understand vulnerability management frameworks, CVSS scoring, remediation SLOs, risk acceptance processes and cyber risk metrics.
  • You have led large-scale remediation, vulnerability reduction, infrastructure currency, operating system upgrade, lifecycle management and regulatory compliance programs.
  • You have managed portfolios worth millions of dollars and large, complex cross-functional delivery teams.
  • You influence senior executives and drive outcomes across organizations without direct authority.
  • You manage finances well, including budgeting, forecasting, resource planning and benefits realization.
  • You have presented to senior leaders, executive governance forums, operating committees and regulators.
  • You hold a bachelor's degree in information technology, computer science, engineering, cybersecurity, business management or a related discipline.
  • Highly desirable: professional cybersecurity certifications such as CISSP, CISM or GCIH.
  • Preferred: a master's degree in an MBA, information systems, cybersecurity, data analytics, artificial intelligence or a related field.
  • Preferred: PMP, PgMP, CISM, CISSP, SAFe, Agile or equivalent certifications.

Conditions

This is a full-time role based in Irving, Texas, United States.

The base salary range is $169,600.00 to $254,400.00.

Applications close on Oct 28, 2026.

Hiring decisions are made by people. Automated tools and AI are used only to match skills to roles, and the company's EEO policy applies.

Benefits

  • Eligible employees may receive discretionary and formulaic incentive and retention awards.
  • Medical, dental and vision coverage, a 401(k), and life, accident and disability insurance.
  • Wellness programs.
  • Paid vacation, paid sick leave and paid holidays.
  • Offerings vary by jurisdiction, job level and date of hire.

Where you’d work

Part of the week in the office

You can work from

  • United States

About the company

Citi

  • Industry: FinTech

Office in United States

Also hiring in London, United Kingdom, New York, United States, Belfast, United Kingdom and 12 more places

Your chances

Worth a look before you spend an evening tailoring a CV for it.

  • 21 checks run
  • 1 red flag

Still hiring?

14 checks

No red flags

How crowded?

7 checks

1 red flag

Fits Me

How well does this role fit you?

Answer a few questions or drop your CV, and every role gets a fit score with the reasons, this one first.

  • Your field
  • Level
  • Stack
  • Work model
  • Salary floor
  • Must-haves
Details12 facts · Role, Location, Compensation, Employment, Company
Seniority
Lead
Type
Full-time
Industry
FinTech
Specialty
Security
Region
United States
Pay period
Annual
Show 6 more factsShow less

Role

Category
DevOps & Infrastructure
Specialty
Security
Seniority
Lead
Experience
10+ years

Location

Work model
Hybrid
Region
United States
Office
  • United States
Remote from
  • United States

Compensation

Salary
$169,600 / year
Pay period
Annual

Employment

Type
Full-time

Company

Industry
FinTech

Something wrong with this vacancy?

Similar vacancies

Share this vacancy

What's wrong with it?

The employer never sees who reported.

Reason