Senior Program Manager, Cybersecurity & Technology Risk

Citi Group; Jacksonville (FL); On-site; USD 140,000 - 210,000; Full time

Job summary

Citi is seeking a Senior Program Manager for the Cybersecurity & Technology Risk domain to lead Citi's enterprise Post Quantum Readiness initiative.

You will drive planning, governance, execution, and delivery across cyber, technology, and business stakeholders, coordinating with external vendors whose roadmaps affect migration timelines.

Qualifications

• Experience leading cross-functional cybersecurity or technology risk programs.
• Ability to translate technical concepts into governance reporting and roadmaps.
• Strong governance and risk management capabilities.

Responsibilities

• Build and maintain the PQC Readiness multi-year program plan, including workstreams, migration phases and waves, milestones, critical path identification, and dependencies on vendors, platforms, and standards.
• Develop and communicate a risk-based, data-driven governance strategy for the Quantum Readiness Program in partnership with architecture, engineering, operations, and information security stakeholders.
• Run the program's operating process, including working group cadence, meeting management, and minutes circulation. Track decisions and escalation paths, and prepare materials for Senior and Executive Management reporting.
• Produce and maintain the single source of truth for program status, with consistent reporting on KPIs, KRIs, and critical success criteria for governance, leadership, internal audit, and regulators.
• Turn prioritized PQ readiness assessments into dated commitments from application and infrastructure owners. Track delivery against roadmaps and escalation issues and delays.
• Align sequencing across shared infrastructure and platforms, so downstream teams are prepared. Proactively coordinate stakeholders and remove blockers.
• Track critical vendor PQC roadmaps and delivery dates using Confluence and Jira and fold vendor roadmap updates into planning.
• Coordinate activities across multiple projects and workstreams while managing competing priorities and resource constraints.
• Engage with internal teams and external parties to identify readiness deficiencies and communicate impacts to program health.

Skills

Program management

Cybersecurity risk

Governance reporting

Stakeholder management

Regulatory engagement

Tools

Confluence

Jira

Job description

About Citi

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management. As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients' best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services. Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We'll enable growth and progress together.

The Role

The Senior Program Manager, Cybersecurity & Technology Risk is a strategic program leadership role accountable for driving the planning, governance, execution, and delivery of Citi's enterprise-wide Post Quantum Readiness Program. This individual will build and maintain the multi-year program plan, coordinate across Cyber, Technology, Infrastructure, Engineering, Architecture, Operations, and Business stakeholders, and manage critical dependencies with external vendors whose quantum roadmaps directly affect Citi's migration timeline. The role carries significant external visibility, including regular engagement with regulators such as the OCC, FRB, FDIC, FCA, Hong Kong Monetary Authority, and Monetary Authority of Singapore. Success in this position requires translating complex technical and cryptographic concepts into executive-ready governance reporting, risk assessments, and actionable roadmaps. This is a highly visible, cross-functional role that directly supports Citi's security posture, operational resilience, and regulatory standing as the organization accelerates its mobilization for Post Quantum migration.

Responsibilities

• Build and maintain the PQC Readiness multi-year program plan, including workstreams, migration phases and waves, milestones, critical path identification, and dependencies on vendors, platforms, and standards.
• Develop and communicate a risk-based, data-driven governance strategy for the Quantum Readiness Program in partnership with architecture, engineering, operations, and information security stakeholders. Maintain integrated roadmaps, execution strategies, and operating frameworks to support successful delivery.
• Run the program's operating process, including working group cadence, meeting management, and minutes circulation. Track decisions and escalation paths, and prepare materials for Senior and Executive Management reporting.
• Produce and maintain the single source of truth for program status, with consistent reporting on KPIs, KRIs, and critical success criteria for governance, leadership, internal audit, and regulators.
• Turn prioritized PQ readiness assessments into dated commitments from application and infrastructure owners.Track delivery against roadmaps and escalation issues and delays.
• Align sequencing across shared infrastructure and platforms such as PKI, HSM (Hardware Security Module), and KMS (Key Management Services), so downstream teams are prepared. Proactively coordinate stakeholders, follow up on action items, and remove blockers.
• Track critical vendor PQC roadmaps and delivery dates using tools includingConfluence and Jira. Fold vendor roadmap updates into program planning and escalatissues and delays.
• Coordinate activities across multiple projects and workstreams while managing competing priorities and resource constraints. Manage internal deadlines, deliverables, and planning for dependent work efforts.
• Engage regularly with internal teams and external parties to identify Quantum Readiness roadmap deficiencies and communicate impacts to overall program health. Respond to the increasing frequency of internal and external regulatory requests on program readiness and alig