The Role
The Senior Program Manager, Cybersecurity & Technology Risk is a strategic program leadership role accountable for driving the planning, governance, execution, and delivery of Citi's enterprise-wide Post Quantum Readiness Program. This individual will build and maintain the multi-year program plan, coordinate across Cyber, Technology, Infrastructure, Engineering, Architecture, Operations, and Business stakeholders, and manage critical dependencies with external vendors whose quantum roadmaps directly affect Citi's migration timeline. The role carries significant external visibility, including regular engagement with regulators such as the OCC, FRB, FDIC, FCA, Hong Kong Monetary Authority, and Monetary Authority of Singapore. Success in this position requires translating complex technical and cryptographic concepts into executive-ready governance reporting, risk assessments, and actionable roadmaps. This is a highly visible, cross-functional role that directly supports Citi's security posture, operational resilience, and regulatory standing as the organization accelerates its mobilization for Post Quantum migration.
Responsibilities
Build and maintain the PQC Readiness multi-year program plan, including workstreams, migration phases and waves, milestones, critical path identification, and dependencies on vendors, platforms, and standards.
Develop and communicate a risk-based, data-driven governance strategy for the Quantum Readiness Program in partnership with architecture, engineering, operations, and information security stakeholders. Maintain integrated roadmaps, execution strategies, and operating frameworks to support successful delivery.
Run the program's operating process, including working group cadence, meeting management, and minutes circulation. Track decisions and escalation paths, and prepare materials for Senior and Executive Management reporting.
Produce and maintain the single source of truth for program status, with consistent reporting on KPIs, KRIs, and critical success criteria for governance, leadership, internal audit, and regulators.
Turn prioritized PQ readiness assessments into dated commitments from application and infrastructure owners. Track delivery against roadmaps and escalate issues and delays.
Align sequencing across shared infrastructure and platforms, such as PKI, HSM (Hardware Security Module), and KMS (Key Management Services), so downstream teams are prepared. Proactively coordinate stakeholders, follow up on action items, and remove blockers.
Track critical vendor PQC roadmaps and delivery dates using tools including Confluence and Jira. Fold vendor roadmap updates into program planning and escalate issues and delays.
Coordinate activities across multiple projects and workstreams while managing competing priorities and resource constraints. Manage internal deadlines, deliverables, and planning for dependent work efforts.
Engage regularly with internal teams and external parties to identify Quantum Readiness roadmap deficiencies and communicate impacts to overall program health. Respond to the increasing frequency of internal and external regulatory requests on program readiness and alignment.
Facilitate the implementation of approved cyber security tools and identify new or improved security solutions or emerging technologies. Communicate changes to cyber security regulations and standards with business and program owners.
Develop Corrective Action Plans for remediation gaps and monitored issues through to completion. Plan communications and training so teams understand what is required of them, when, and where to get help.
Build internal relationships and drive program-level timelines and requirements across the Enterprise and globally.
Appropriately assess risk when business decisions are made, with particular consideration for the firm's reputation. Drive compliance with applicable laws, rules, and regulations, and apply sound ethical judgment regarding personal conduct. Escalate, manage, and report control issues with transparency, and effectively supervise the activity of others, creating accountability with those who fail to maintain these standards.
Qualifications
6+ years' experience managing technology programs and/or large projects within highly regulated, enterprise and global environments.
Technical PM experience within cybersecurity is highly preferred.
Solid understanding of technologies where cryptography is applied, such as software, networking, identity systems, and data platforms.
Understanding of cryptography, algorithms, and implementations, maintained and enhanced through ongoing research, self-study, and engagement.
Enterprise and solution-oriented architectural experience.
Ability to leverage Citi generative AI tools to accelerate data analysis and automate presentation creation, transforming complex datasets into polished, management-ready visual narratives.
Strong verbal and written communication, diplomacy, and influencing skills are required.
Experience negotiating with external parties, including suppliers and vendors, is a plus.
Education
Bachelor's degree in Computer Science or equivalent relevant experience.
Master's degree preferred.
Relevant industry certifications like CAPM, PMP, PgMP, etc. are a plus.
This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.
#LI-MN1
Job Family Group
Project and Program Management
Job Family
Program Management
Time Type
Full time
Primary Location
Jacksonville Florida United States
Primary Location Full Time Salary Range
$103,920.00 - $155,880.00
In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.
- Most Relevant Skills
- Please see the requirements listed above.
- Other Relevant Skills
- For complementary skills, please see above and/or contact the recruiter.
Anticipated Posting Close Date
Nov 12, 2026
Automated Processing and AI
We use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi.
Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.
Illinois residents – AI Notice and Right
Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.
If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.
View Citi’s EEO Policy Statement and the Know Your Rights poster.
