Technology Product Management Analyst - Assistant Vice President

Citigroup Inc.; Mississauga; Hybrid; CAD 132,000 - 197,000; Full time

Benefits offered by this job

Hybrid work model

Learning & development

Exposure to broad app portfolio

Wellbeing & work-life balance

Performance-driven environment

Competitive compensation

Job summary

Citigroup Inc. is seeking a Technology Risk & Application Governance Analyst to partner with Application Managers across a portfolio of enterprise and vendor-supplied applications.

You will bridge development teams with risk and control frameworks, keeping processes on track while enabling efficient operations. Responsibilities include managing application lifecycles, coordinating third‑party risk assessments, vulnerability activities, and building knowledge bases to drive consistency and

Qualifications

• 2+ years IT experience with 3+ years in app development, production support, or DevOps.
• Experience navigating large enterprise environments with formal risk and control processes.
• Proficiency in Jira or similar agile tracking tool; data analysis in Excel.
• Strong understanding of SDLC and DevOps/DevSecOps principles.

Responsibilities

• Manage full administrative lifecycle of applications across portfolio within governance and ITSM platforms.
• Coordinate risk assessments and approvals with Information Security, Enterprise Architecture, and control groups.
• Serve as liaison with vendors, ensuring contracts, support procedures, and key contacts are documented.

Skills

IT experience

Application Development

DevOps

Jira

Excel

SDLC

DevSecOps

Organisational skills

Communication

Tools

Jira

Job description

Citi is looking for a Technology Risk & Application Governance Analyst to serve as a critical operational partner to Application Managers across a portfolio of enterprise and vendor-supplied applications, reducing administrative burden and ensuring teams stay ahead of governance and compliance requirements. In this role, you will bridge the gap between application development teams and the firm's technology risk and control frameworks, acting as a dedicated delegate who keeps complex lifecycle and compliance processes on track. Your work will directly enable development teams to operate efficiently while maintaining the highest standards of application governance in a large, regulated financial environment.

Responsibilities

• Manage the full administrative lifecycle of applications across a portfolio, coordinating onboarding, inter-departmental transfers, and infrastructure capacity requests within governance and IT Service Management platforms to ensure accurate, up-to-date records in the central Application Portfolio Management system.

• Facilitate the execution of technology risk and control assessments by liaising between development teams, Application Managers, and control groups such as Information Security and Enterprise Architecture, ensuring submissions, approvals, and architecture sign-offs are completed on schedule.

• Serve as the primary administrative point of contact between internal technical teams and external software vendors, coordinating third-party risk assessments with Information Security, Procurement, and Legal teams, and maintaining clear documentation of vendor contracts, support procedures, and key contacts.

• Coordinate Application Vulnerability Assessments and penetration testing activities, tracking the remediation of identified findings using security tooling and supporting the maintenance of the application's Software Bill of Materials to keep all third-party components licensed, secure, and compliant.

• Build and maintain structured knowledge maps covering key stakeholders, processes, and contacts across specific applications and business lines, creating reusable knowledge bases that drive consistency and efficiency across compliance and administrative workflows.

• Identify and implement automation opportunities for repetitive tasks such as audit evidence collection and status report generation, reducing manual effort and improving the speed and accuracy of compliance activities.

• Produce and distribute clear status reports for Application Managers and stakeholders, keeping all parties informed of compliance progress, emerging risks, and upcoming deadlines across the application portfolio.

Required Qualifications & Skills

• At least 2 years of IT experience overall, with a minimum of 3 years in an Application Development, Production Support, or DevOps environment, demonstrating hands‑on familiarity with how applications are built, maintained, and governed.

• Proven ability to navigate large, complex enterprise environments with formal risk and control processes, managing multiple competing priorities and adjusting quickly to shifting demands.

• Fluency in Jira or an equivalent agile tracking tool, used to coordinate, track, and report on tasks across multiple teams and workstreams.

• Intermediate to expert‑level proficiency in Microsoft Excel, applied to data analysis, compliance tracking, and stakeholder reporting.

• Solid grasp of the end‑to‑end Software Development Lifecycle and modern DevOps and DevSecOps principles, enabling effective collaboration with engineering and security teams.

• Exceptional organisational skills with the ability to plan, manage, and deliver across a high‑volume workload while maintaining accuracy and meeting compliance deadlines.

• Clear and confident communication skills, with demonstrated experience coordinating across a broad range of stakeholders from technical developers to senior management.

Beneficial Skills & Qualifications

• Experience supporting the management of vendor‑supplied applications, including coordinating with third‑party support teams and internal risk assessment functions.

• Familiarity with DevSecOps toolchains such as Blackduck, Snyk, or Checkmarx, particularly in the context of vulnerability management and software composition analysis.

• Working knowledge of IT Service Management platforms such as ServiceNow, or experience with low‑code automation tools used to streamline operational and compliance workflows.

• Foundational understanding of ITIL concepts and how they apply to service management and application support in an enterprise context.

• Background in Capital Markets or a similarly regulated financial services environment, bringing familiarity with the governance standards and risk expectations of a major financial institution.

What We Offer

Joining Citi means becoming part of a global organisation where your contributions directly shape how technology risk and governance are managed at scale. This role offers meaningful ownership, consistent collaboration with senior stakeholders, and real opportunities to grow your expertise across application management, security compliance, and process improvement.

• A hybrid working model with 3 days in the office and 2 days working remotely, giving you flexibility while staying connected to your team.

• Access to learning and development programmes that support your continued growth in technology governance, risk management, and enterprise operations.

• Exposure to a broad portfolio of applications and business lines within a leading global financial institution, accelerating your professional development.

• Wellbeing support and work‑life balance initiatives designed to help you perform at your best inside and outside of work.

• A performance‑driven environment where collaboration, initiative, and delivery are recognised and rewarded.

• Competitive financial benefits and compensation, reflective of your skills and contributions.

Job Family Group:

Technology

Job Family:

Technology Product Management

Time Type:

Full time

Primary Location Full Time Salary Range:

$94,300.00 - $141,500.00

Most Relevant Skills

Please see the requirements listed above.

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

Automated Processing and AI

We use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi.

Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision‑making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.

This job opening is for an existing job vacancy.

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.