Technology Product Management Analyst - Assistant Vice President

Citi; Mississauga; Hybrid; CAD 132,000 - 197,000; Full time

Benefits offered by this job

Hybrid work model

Learning & development

Broad portfolio exposure

Wellbeing support

Performance driven culture

Competitive compensation

Job summary

Citi in Mississauga is seeking a Technology Risk & Application Governance Analyst to act as the operational partner to Application Managers across a portfolio of enterprise and vendor-supplied applications. You will bridge development teams with risk and control frameworks, ensuring lifecycle and compliance processes stay on track, enabling efficient development in a regulated environment.

The role emphasizes collaboration with Information Security, Legal, Procurement, and IT groups, plus

Qualifications

• At least 2 years IT experience, with 3 years in an App Development, Production Support, or DevOps environment.
• Experience navigating large enterprise environments with formal risk and control processes.
• Fluency in Jira or an equivalent agile tracking tool.
• Intermediate to advanced Excel skills for data analysis and reporting.
• Solid understanding of the SDLC and modern DevOps/DevSecOps practices.
• Exceptional organisational skills for high-volume workloads and strict deadlines.
• Clear, confident communication across broad stakeholder groups.

Responsibilities

• Oversee full admin lifecycle of applications, onboarding, transfers, and capacity requests within governance platforms.
• Coordinate risk assessments between development teams, managers, and control groups; ensure timely sign-offs.
• Act as primary admin liaison between internal teams and external vendors; document contracts and contacts.
• Coordinate vulnerability assessments and remediation tracking, maintain SBOM records.
• Build knowledge maps across stakeholders and processes for reusable efficiency.
• Identify automation opportunities to reduce manual efforts in audits and reporting.
• Produce regular status reports on compliance progress and upcoming deadlines.

Skills

Communication skills

Organisational skills

Stakeholder management

Risk & control concepts

Tools

Jira

ServiceNow

Snyk

Blackduck

Checkmarx

Low-code automation tools

ITIL concepts

Job description

Citi is looking for a Technology Risk & Application Governance Analyst to serve as a critical operational partner to Application Managers across a portfolio of enterprise and vendor-supplied applications, reducing administrative burden and ensuring teams stay ahead of governance and compliance requirements. In this role, you will bridge the gap between application development teams and the firm's technology risk and control frameworks, acting as a dedicated delegate who keeps complex lifecycle and compliance processes on track. Your work will directly enable development teams to operate efficiently while maintaining the highest standards of application governance in a large, regulated financial environment.

Responsibilities

• Manage the full administrative lifecycle of applications across a portfolio, coordinating onboarding, inter-departmental transfers, and infrastructure capacity requests within governance and IT Service Management platforms to ensure accurate, up-to-date records in the central Application Portfolio Management system.
• Facilitate the execution of technology risk and control assessments by liaising between development teams, Application Managers, and control groups such as Information Security and Enterprise Architecture, ensuring submissions, approvals, and architecture sign-offs are completed on schedule.
• Serve as the primary administrative point of contact between internal technical teams and external software vendors, coordinating third-party risk assessments with Information Security, Procurement, and Legal teams, and maintaining clear documentation of vendor contracts, support procedures, and key contacts.
• Coordinate Application Vulnerability Assessments and penetration testing activities, tracking the remediation of identified findings using security tooling and supporting the maintenance of the application's Software Bill of Materials to keep all third-party components licensed, secure, and compliant.
• Build and maintain structured knowledge maps covering key stakeholders, processes, and contacts across specific applications and business lines, creating reusable knowledge bases that drive consistency and efficiency across compliance and administrative workflows.
• Identify and implement automation opportunities for repetitive tasks such as audit evidence collection and status report generation, reducing manual effort and improving the speed and accuracy of compliance activities.
• Produce and distribute clear status reports for Application Managers and stakeholders, keeping all parties informed of compliance progress, emerging risks, and upcoming deadlines across the application portfolio.

Required Qualifications & Skills

• At least 2 years of IT experience overall, with a minimum of 3 years in an Application Development, Production Support, or DevOps environment, demonstrating hands-on familiarity with how applications are built, maintained, and governed.
• Proven ability to navigate large, complex enterprise environments with formal risk and control processes, managing multiple competing priorities and adjusting quickly to shifting demands.
• Fluency in Jira or an equivalent agile tracking tool, used to coordinate, track, and report on tasks across multiple teams and workstreams.
• Intermediate to expert-level proficiency in Microsoft Excel, applied to data analysis, compliance tracking, and stakeholder reporting.
• Solid grasp of the end-to-end Software Development Lifecycle and modern DevOps and DevSecOps principles, enabling effective collaboration with engineering and security teams.
• Exceptional organisational skills with the ability to plan, manage, and deliver across a high-volume workload while maintaining accuracy and meeting compliance deadlines.
• Clear and confident communication skills, with demonstrated experience coordinating across a broad range of stakeholders from technical developers to senior management.

Beneficial Skills & Qualifications

• Experience supporting the management of vendor-supplied applications, including coordinating with third-party support teams and internal risk assessment functions.
• Familiarity with DevSecOps toolchains such as Blackduck, Snyk, or Checkmarx, particularly in the context of vulnerability management and software composition analysis.
• Working knowledge of IT Service Management platforms such as ServiceNow, or experience with low-code automation tools used to streamline operational and compliance workflows.
• Foundational understanding of ITIL concepts and how they apply to service management and application support in an enterprise context.
• Background in Capital Markets or a similarly regulated financial services environment, bringing familiarity with the governance standards and risk expectations of a major financial institution.

What We Offer

Joining Citi means becoming part of a global organisation where your contributions directly shape how technology risk and governance are managed at scale. This role offers meaningful ownership, consistent collaboration with senior stakeholders, and real opportunities to grow your expertise across application management, security compliance, and process improvement.

• A hybrid working model with 3 days in the office and 2 days working remotely, giving you flexibility while staying connected to your team.
• Access to learning and development programmes that support your continued growth in technology governance, risk management, and enterprise operations.
• Exposure to a broad portfolio of applications and business lines within a leading global financial institution, accelerating your professional development.
• Wellbeing support and work-life balance initiatives designed to help you perform at your best inside and outside of work.
• A performance-driven environment where collaboration, initiative, and delivery are recognised and rewarded.
• Competitive financial benefits and compensation, reflective of your skills and contributions.

Automated Processing and AI

We use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi.

Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.

This job opening is for an existing job vacancy.

Job Family Group

Technology

Job Family

Technology Product Management

Time Type

Full time

Primary Location Full Time Salary Range

$94,300.00 - $141,500.00

© Equal Opportunity

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.