CybersecurityJobs.io - Jobs in infosec and cybersecurity.

Latest Jobs

Today

Lead Cybersecurity Architect

JPMorganChase Brooklyn, NY

Brooklyn, NY

Today

$157k - $215k/yr Full time Ai Security Application Security Cloud Platforms

Apply Now

Job Description

JPMorganChase is seeking a Lead Cybersecurity Architect to help define and lead the evaluation of cybersecurity principles, controls, and enterprise solutions across software applications and platform products. Within Cybersecurity and Technology Controls, this role blends architecture leadership with vulnerability-driven recommendations and AI-assisted security validation across the software development lifecycle.

This onsite position is based in Brooklyn, NY, and the role spans technical guidance for engineering and business partners while driving reuse-first security validation practices in toolchains and routines.

What you’ll do

Guide evaluation of current cybersecurity principles, processes, and controls, and lead assessment of new technologies using existing standards and frameworks
Leverage enterprise-authorized AI capabilities to accelerate cybersecurity risk analysis and control assessment, while validating outputs and managing data according to sensitivity and security requirements
Provide technical guidance and direction to support the business and technical teams, contractors, and vendors as a firm-wide subject matter expert in one or more focus areas
Partner with stakeholders and senior business leaders to recommend business modifications during vulnerability periods
Actively contribute to the engineering community by advocating firm-wide frameworks, tools, and software development lifecycle practices
Drive reuse-first adoption of AI-assisted security validation within the software development lifecycle and toolchain routines to improve control testing, remediation quality, and traceability and auditability in line with resiliency expectations

What you bring

5+ years of applied experience, with formal training or certification focused on cybersecurity architecture concepts
Hands-on experience performing threat modeling, attack-surface analysis, or security architecture assessments
Hands-on experience delivering enterprise-level cybersecurity solutions and controls
Demonstrated experience using enterprise-authorized AI capabilities to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity
Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring alignment with security, resiliency, and auditability expectations
Advanced expertise in one or more programming languages and/or applications, plus advanced knowledge of cybersecurity architecture and applications within one or more disciplines (for example, public cloud, AI/ML, mobile)
Ability to address design and functionality problems independently with little to no oversight
Ability to evaluate current and emerging technologies to select or recommend future-state architecture solutions
Ability to communicate complex security concepts to senior business leaders and non-technical stakeholders

Technologies and frameworks

AI/ML, NIST, MITRE ATT&CK, STRIDE, OWASP, and zero-trust principles
Public cloud with AWS, GCP, and Microsoft Azure
OAuth, machine-to-machine authentication, APIs
Large language model-enabled applications and secure-as-a-service environments
Software development lifecycle and AI-assisted security validation

Benefits

Comprehensive health care coverage
On-site health and wellness centers
Retirement savings plan
Backup childcare
Tuition reimbursement
Mental health support
Financial coaching

Additional preferred qualifications

Experience securing enterprise cloud and software-as-a-service environments, including architecture, data flows, identity, access, integrations, and security controls across third-party services
Security architecture experience across AWS, GCP, and Microsoft Azure, including cloud-native security controls and shared responsibility models
Experience evaluating SaaS integrations, APIs, OAuth applications, service principals, application identities, and machine-to-machine authentication from a security and risk perspective
Experience securing AI/ML and large language model-enabled applications, agents, and emerging AI capabilities, including risks tied to data access, permissions, external integrations, and third-party model dependencies
Experience developing security control baselines, architecture standards, threat models, assessment frameworks, and reusable security patterns across cloud and SaaS technologies
Familiarity with established security frameworks and methodologies such as NIST, MITRE ATT&CK, STRIDE, OWASP, and zero-trust principles

Compensation: USD 156,750 - 215,000 per year.

Team context

Corporate Functions professionals support a diverse range of areas from finance and risk to human resources and marketing.
Corporate teams help ensure businesses, clients, customers, and employees are set up for success.

View full job page →

Today

Director, Cybersecurity Architecture

Crowley Maritime Corporation Jacksonville, FL

Jacksonville, FL

Today

Full time Cybersecurity Architecture Data Security Information Security

Apply Now

Job Description

Crowley Maritime Corporation is seeking a seasoned cybersecurity architecture leader to guide how security is designed, engineered, and operated across the enterprise. In this hybrid role based in Jacksonville, you will set direction for architecture standards and reusable patterns, while working closely with technology and business stakeholders to ensure secure technology delivery and readiness for commercial, government, regulatory, and contractual obligations.

What You’ll Do

Own and maintain the cybersecurity architecture roadmap, coordinating priorities, dependencies, and milestones with enterprise technology roadmaps and business plans.
Define and keep current security architecture principles, reference architectures, technical standards, control baselines, and reusable design patterns.
Lead secure-by-design reviews through enterprise architecture and technology governance, ensuring security requirements and approved conditions are addressed before deployment.
Coordinate cybersecurity architecture and engineering plans across Infrastructure, IT Operations, Applications, Data, Cloud, Enterprise Architecture, and other technology teams.
Develop and manage budgets, forecasts, and business cases for architecture and engineering capabilities, tying investments to risk reduction, regulatory needs, resilience, and business outcomes.
Translate cyber threats, vulnerabilities, and control gaps into business impact, options, and recommendations for executive and non-technical audiences.
Provide architecture guidance across cloud, identity, network, endpoint, application, data, operational technology, IoT, and other connected environments.
Define security acceptance criteria, required telemetry, and engineering requirements, partnering with delivery teams to implement, validate, and operationalize approved designs.
Evaluate security technologies and services for business fit, alignment with architecture, risk reduction, supportability, cost, and integration requirements.
Govern technical exceptions and security design debt, including documented rationale, compensating controls, accountable owners, and remediation plans.
Lead the Security Operations Center and cybersecurity incident response capability, including monitoring, detection, investigation, containment, and recovery coordination, with threat intelligence and digital forensics support.
Establish the SOC operating model, service expectations, response plans, playbooks, escalation paths, performance measures, and coordination processes with Technology, Legal, Risk, Communications, and business teams.
Use operational findings, incidents, assessments, audits, and technology changes to improve security patterns and priorities.
Lead, coach, and develop cybersecurity architects and engineers, building cross-functional communities of practice and reducing reliance on single individuals.
Maintain relationships with business leaders, technology teams, Legal, Risk, vendors, customers, and government or regulatory stakeholders as appropriate.

Minimum Qualifications

Bachelor’s degree in computer science, information systems, business, or a related field, or a combination of post-high school education and experience equal to nine (9) years.
10+ years of progressively responsible experience in cybersecurity, enterprise architecture, infrastructure, cloud, security operations, or related technology disciplines, including 5+ years of leadership experience.
Proven experience leading or overseeing a Security Operations Center and major cybersecurity incident response, building security architectures and roadmaps, coordinating delivery across multiple technology teams, and presenting cyber risk and recommendations to executives and business audiences.
Strong knowledge of enterprise security architecture and secure-by-design practices, including cloud and hybrid infrastructure; identity and Zero Trust; network, endpoint, application, and data security; encryption and key management; security monitoring and automation; and architecture threat modeling.
Strong working knowledge of SOC operations, incident command, detection engineering, logging and telemetry, threat intelligence, vulnerability management, digital forensics, and incident response.
Experience applying government and industry frameworks such as NIST, CMMC, ISO 27001, or comparable standards.
One of the following certifications: CISSP, CISM, or CCISO.
Ability to travel to participate in incident, regulatory, customer, or executive discussions when architecture expertise is required.
Ability to translate cyber risk into clear business impacts, trade-offs, investment choices, and recommended actions.
Effective communication with executives, business leaders, engineers, auditors, customers, and government stakeholders.
Experience building practical roadmaps, budgets, and business cases that connect technology work to risk reduction and business outcomes.
Capability to coordinate priorities, dependencies, and delivery commitments across multiple technology teams.
Strong architecture judgment balancing security effectiveness, resilience, user experience, cost, and speed.
Ability to influence across organizational boundaries and create alignment without relying solely on formal authority.
Ability to convert requirements into reusable patterns rather than one-off solutions.
Use of evidence, operational results, and measurable outcomes to adjust priorities and improve designs.
Experience developing technical talent, cross-training, documentation, and succession coverage, while challenging designs constructively to reach an approved, supportable deployment path.

Preferred Background

Experience in government, regulated, critical infrastructure, operational technology, maritime, or similarly complex environments.
Familiarity with operational technology and critical-infrastructure security principles.

Technologies and Frameworks

NIST, CMMC, ISO 27001
Zero Trust
CISSP, CISM, CCISO

Work Arrangement

Hybrid

Benefits

Competitive pay with recognition programs
Comprehensive benefits: medical, dental, and vision insurance, life and disability coverage, and paid vacation and holidays
Parental leave and sick leave
Learning and growth with access to training and development
Employee Assistance Program, wellness program, and gym membership discounts

Location: Jacksonville, FL (hybrid)

View full job page →

Today

RMF Cybersecurity Analyst

ASRC Federal Quantico, VA

Quantico, VA

Today

$112k - $141k/yr Full time Cybersecurity Tools Dod Rmf Information Security

Apply Now

Job Description

The RMF Cybersecurity Analyst will support the DCSA program at ASRC Federal, based in Quantico, VA with a hybrid work arrangement. The role focuses on Risk Management Framework (RMF) activities across multiple programs, systems, or enclaves, including cybersecurity policy enforcement, documentation, and authorization support.

Key Responsibilities

Manage Risk Management Framework (RMF) support across multiple programs, systems, or enclaves by proposing, coordinating, implementing, and enforcing cybersecurity policies, standards, and methodologies for information systems or enclave environments.
Provide cybersecurity documentation support, Plan of Actions & Milestones (POAM), enterprise mission assurance support service (eMASS) submissions, and system security engineering efforts.
Prepare and review documentation that includes Systems Security Plans (SSPs) and Security Assessment & Authorization (SA&A) packages in alignment with DoD RMF procedures.
Develop, maintain, and provide for Government review the DoD and other federal agency-specific documentation required under the Government A&A Framework and DoDI 8510.01, as applicable.
Provide Cyber IT analysis results and test reports for Government approval.
Prepare enterprise-wide SOPs and reporting for high-level officials.

Required Qualifications

Knowledge of RMF, STIGs, and eMASS or similar tools such as Xacta or CSAM.
Knowledge of DISA Security Technical Information Guides, RMF, NIST SP 800-53, vulnerability tools, and other applicable DoD cybersecurity policies.
Skilled in preparing and reviewing documentation, including SSPs and SA&A packages, according to DoD RMF procedures.
Experience developing, updating, and submitting for Government review DoD and other federal agency-specific documentation required by the Government A&A Framework and DoDI 8510.01, as applicable.
Experience providing Cyber IT analysis results and test reports for Government approval.
Strong writing skills, including the ability to prepare enterprise-wide SOPs and reports for senior stakeholders.
At least two (2) years of system-level Cybersecurity RMF experience.
Bachelor’s Degree (or equivalent experience) in cybersecurity and/or information systems management, information technology.
8570 IAM/IAT Level I certification (or required equivalent), such as A+CE, Network+ CE, SSCP, CCNA-Security, CAP, GSLC, Security+ CE or higher.
Active Secret Required with eligibility for TS.
If working from an alternate site other than DCSA facilities or corporate office space, reliable ability to communicate over voice (cell phone preferred) and maintain stable, capable internet connectivity.
Ability to speak English well enough to communicate complex technical ideas to a diverse customer in both verbal and written formats.

Tools and Technologies

Risk Management Framework (RMF)
STIGs
eMASS
Xacta
CSAM
DISA Security Technical Information Guides
NIST SP 800-53
Vulnerability Tools
Plan of Actions & Milestones (POAM)
Systems Security Plans (SSPs)
Security Assessment & Authorization (SA&A)
Government A&A Framework
DoDI 8510.01
DoD Risk Management Framework (RMF)
8570 IAM/IAT Level I and related certifications (A+CE, Network+ CE, SSCP, CCNA-Security, CAP, GSLC, Security+ CE)

Work Location and Schedule

Quantico, VA (hybrid)
Primarily a telework position with a requirement to be onsite at least two (2) days per week, subject to change based on Government direction.

Benefits

Health care
Dental
Vision
Life insurance
401(k)
Education assistance
Paid time off including PTO
Holidays
Any other paid leave required by law

Clearance

Active Secret Required and eligibility for TS

Certification Requirement

8570 IAM/IAT Level I (or required equivalent), such as A+CE, Network+ CE, SSCP, CCNA-Security, CAP, GSLC, Security+ CE or higher.

View full job page →

Today

Cybersecurity Information System Security Engineer

LMI Detroit, MI

Detroit, MI

Today

$92k - $158k/yr Full time Authorization To Operate Cloud Cloud Platforms

Apply Now

Job Description

LMI is hiring a Senior Cybersecurity Information System Security Engineer to support the US Army Portfolio Acquisition Executive (PAE) Maneuver Ground office in Detroit, MI on an onsite basis. This role focuses on driving Risk Management Framework (RMF) efforts to achieve and maintain Authority to Operate (ATO) approvals, with the ability to shape security planning across cloud and hybrid environments.

What you’ll get: an opportunity to work at the intersection of cybersecurity engineering and government mission delivery, collaborating with system engineers, program leadership, and Authorizing Officials. The position requires an active Secret clearance and offers a salary range of USD 92,075 - 158,138 per year.

Responsibilities

Collaborate with system engineers, program managers, and Authorizing Officials (or their delegates) to define and implement system security requirements.
Lead continuous monitoring and verification of cybersecurity requirements throughout the system lifecycle.
Provide trusted cybersecurity guidance and recommendations to government stakeholders and contractor teams.
Design, review, and refine system security architectures for cloud, on-premises, and hybrid environments.
Support the RMF process to achieve and maintain ATO approvals.
Identify, track, and mitigate security control gaps and non-compliance, ensuring alignment with security standards.
Conduct risk and vulnerability assessments, and develop and maintain key documentation including System Security Plans (SSPs).
Manage and facilitate Interim Authority to Test (IATT) activities, risk assessments, and all ATO-related processes.
Analyze security control deficiencies and determine their impact on enterprise risk levels and cybersecurity program effectiveness.
Partner with the Information System Security Manager (ISSM) and product teams to identify control gaps, propose mitigations, and support Program of Action and Milestones (POAM) submissions.
Guide system engineers on mitigation of vulnerability findings using security scanning tools, DoD policies, and industry best practices.
Evaluate alternatives, assess trade-offs, and recommend risk treatment strategies as part of cybersecurity engineering activities.
Collaborate cross-functionally to support delivery of secure and dependable systems.
Develop and maintain dashboards to monitor platform system controls, logs, and compliance status for reporting.
Apply cloud cybersecurity solutions and practices.
Apply NIST SP 800-53 Revision 4 or 5 security controls and NIST SP 800-53A security assessment procedures.

Requirements

Active SECRET security clearance (minimum requirement).
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering from an ABET-accredited or NCAE-C designated institution.
5+ years of hands-on experience in system and/or security engineering within U.S. Government systems.
Practical experience working within government cloud platforms (e.g., Azure, Amazon C2S, Commercial Cloud, or GovCloud), including secure implementation of security planning, design, and operations.
Proven ability to develop and maintain RMF documentation, including SSPs and POAMs.
Experience working with DoD technologies, systems, and command & control policies and procedures.
Hands-on experience utilizing Enterprise Mission Assurance Support Service (eMASS) for compliance management and reporting.
Familiarity with federal IT security requirements, including DoD cyber regulations, FedRAMP, and FISMA compliance.
Knowledge of DoD STIGs, SRGs, and security requirements outlined in NIST SP 800-53 and corresponding assessment procedures.
Strong communication and interpersonal skills for interactions with technical teams and non-technical stakeholders.
One or more certifications: GISF, Security+, CASP+, CSSP, Cloud+, CSSLP, GSEC, or GSEC-equivalent. If not currently held, must obtain within the first 30 days of employment.

Technologies

Azure
Amazon C2S
Commercial Cloud
GovCloud
Enterprise Mission Assurance Support Service (eMASS)
FedRAMP
FISMA
NIST SP 800-53
NIST SP 800-53A
DoD STIGs
SRGs
RMF
SSPs
POAMs
IATT

Core Knowledge (KSATS – DoD Cyber Workforce)

In-depth knowledge of computer networking concepts, protocols, and methodologies to ensure effective network security.
Expertise in risk management processes for identifying, assessing, and mitigating risks.
Comprehensive understanding of national and international laws, regulations, policies, and ethical standards impacting cybersecurity operations.
Proficient knowledge of core cybersecurity principles and best practices for protecting information systems and data.
Awareness of cyber threats, vulnerabilities, and emerging attack vectors.
Strong understanding of operational impacts cybersecurity lapses can impose on systems, data integrity, and organizational objectives.
Expertise in cloud computing service models: SaaS, IaaS, and PaaS.
Solid understanding of cloud deployment models: private, public, and hybrid, including differences between on-premises and off-premises environments.

Preferred Additional Qualifications

Expertise in cloud security planning, design, and operations.
Experience with systems engineering lifecycle processes and Agile development methodologies.
Familiarity with Continuous Integration/Continuous Delivery (CI/CD) frameworks and DevSecOps practices.
Tactical military experience is strongly preferred.

View full job page →

Today

Senior Enterprise Cybersecurity Architect

Penn Medicine Philadelphia, PA

Philadelphia, PA

Today

Full time Senior Cybersecurity Architecture Information Security

Apply Now

Job Description

Own enterprise security architecture and engagement delivery across technology change initiatives.

Responsibilities

Identify cybersecurity control requirements for technology initiatives and design solutions that are effective, practical, and aligned to project and business objectives
Serve as a cybersecurity subject matter expert by assessing enterprise business impact of cybersecurity risks
Recommend and present options to mitigate identified cybersecurity risks
Support the development and ongoing maintenance of cybersecurity architecture and strategy
Build a broad understanding of business operations to determine which areas may have cybersecurity implications
Evaluate and develop secure solutions based on approved security architectures
Partner with functional area architects and cybersecurity specialists to ensure security solutions are implemented across IT systems and platforms
Provide risk-focused communication of cybersecurity risks and solutions to technical audiences, non-technical stakeholders, and multiple management levels
Lead and participate in resource planning and engagement management
Lead and participate in service development and continuous improvement
Engage professionally with coworkers, management, internal and external customers, and partners
Ensure work aligns with Penn Medicine and entity values, policies, and procedures

Requirements

Bachelor’s degree required
10+ years of Information Technology and cybersecurity experience
Minimum 3 years within cybersecurity required
3+ years of experience with cybersecurity architecture and solution design required

Location & Work Model

Philadelphia, PA (hybrid)

Benefits

Comprehensive compensation and benefits program
Prepaid tuition assistance program
Employee benefits programs designed to help employees get healthy and stay healthy

View full job page →

Today

Manager, Development Engineering - Cybersecurity

Emerson Pittsburgh, PA

Pittsburgh, PA

Today

Full time Manager Cybersecurity Leadership Incident Response

Apply Now

Job Description

Lead cybersecurity execution across product development and Industrial Automation and Control System (IACS) offerings with Emerson in Pittsburgh, PA.

Responsibilities

Own product cybersecurity strategy, governance, compliance, and secure development practices across the product portfolio.
Direct vulnerability management, penetration testing, and incident response coordination; drive cybersecurity risk mitigation efforts.
Manage third-party cybersecurity solutions, vendor relationships, and third-party integration activities.
Drive compliance and certification initiatives, including IEC 62443 and evolving cybersecurity regulations.
Provide leadership for industrial communications architectures and system integration across operational and enterprise environments.
Partner with internal and external stakeholders to advance product security objectives and technology roadmaps.
Lead, mentor, and develop a team of cybersecurity and communications professionals while promoting a strong security culture.

Requirements

Bachelor’s degree in Cybersecurity, Computer Engineering, Computer Science, Information Technology, Engineering, or related discipline; equivalent combination of education and experience will be considered.
Minimum 5 years of progressive cybersecurity experience, including leading cybersecurity operations, risk management, compliance, and incident response programs.
Strong background in leadership or people management, plus technical foundations in industrial networking, communications, automations, or a related field.
Knowledge of IEC 62443, Vulnerability Management, and NERC-CIP.
Experience with process and product certifications, including SAFETY Act and IEC 62443 4-1, 4-2, & 3-3.
Legal authorization to work in the United States without sponsorship now or in the future.

Technologies

IEC 62443, OPC UA, MQTT, Modbus, DNP3, IEC 61850, PROFINET, BACnet
SAFETY Act, NERC-CIP, ISO 27001
NIST Secure Software Development Framework, NIST Cybersecurity Framework
OWASP Software Assurance Maturity Model, OWASP Secure by Design Framework
Zero trust, Secure by Design
Cloud Security (Azure and/or AWS), Identity & Access Management
Security Operations and Threat Detection, Software Bill of Materials
CISSP, Security+, GICSP

Benefits

Medical insurance plans
Dental and vision coverage
Employee Assistance Program
401(k)
Tuition reimbursement
Employee resource groups
Recognition
Flexible time off plans
Paid parental leave (maternal and paternal)
Vacation and holiday leave

Who You Are

Acts quickly and decisively in fact-changing, unpredictable situations.
Separates relevant from irrelevant signals to manage complex situations.
Communicates effectively in one-on-one, small and large group settings, and across diverse position levels.
Develops others through coaching, feedback, exposure, and stretch assignments.

Preferred Qualifications

10+ years of progressive cybersecurity experience.
Experience securing Industrial Control Systems (ICS), Operational Technology (OT), Manufacturing, or Industrial Automation environments.
Experience supporting global organizations and distributed teams.
Knowledge of the Ovation Product Portfolio, and/or critical infrastructure and industrial cybersecurity regulations impacting power, water, and controls/automation industries.
Professional certifications including CISSP, Security+, GICSP.
Strong understanding of security standards and regulations: ISO 27001, NIST Secure Software Development Framework, NIST Cybersecurity Framework, OWASP Software Assurance Maturity Model, OWASP Secure by Design Framework.
Strong understanding of modern security topics: Zero trust, Secure by Design, Cloud Security (Azure and/or AWS), Identity & Access Management, Security Operations and Threat Detection, Software Bill of Materials.

Our Culture & Commitment

Workplace focused on valuing, respecting, and empowering employees to grow.
Encourages innovation, collaboration, and diverse perspectives.
Supports ongoing career development and an inclusive culture.
Recognizes employee wellbeing.

Work Authorization

Emerson will only employ individuals legally authorized to work in the United States.
No sponsorship is provided for this position.
Not eligible for hire: individuals with temporary visas such as E, F-1 (including OPT or CPT), H-1, H-2, L-1, B, J, or TN, or who need sponsorship for work authorization now or in the future.

Accessibility Assistance or Accommodation

If you have a disability and have difficulty accessing or using this website to apply for a position, contact: idisability.administrator@emerson.com.

View full job page →

Today

Cybersecurity & Infrastructure Senior Program Management Lead

Citi Irving, TX

Irving, TX

Today

$170k - $254k/yr Full time Senior Cybersecurity Operations Data Security

Apply Now

Job Description

The Cybersecurity & Infrastructure Senior Program Management Lead will oversee complex cybersecurity and infrastructure modernization programs, driving governance, execution, delivery, and measurable risk reduction across enterprise technology initiatives.

Location and Employment

Location: Irving, TX (onsite)
Employment type: Full time
Job family group: Technology
Job family: Digital Technical Program Management
Primary location: Irving Texas United States

Compensation

Salary range: USD 169,600 - 254,400 per year

Key Responsibilities

Partner with senior leaders across Cybersecurity, Infrastructure, Engineering, Risk, Compliance, and Operations to set priorities, resolve dependencies, and align strategy.
Build executive-level dashboards and reporting to improve program transparency across health, risk reduction, vulnerability remediation, infrastructure currency, and business outcomes.
Lead infrastructure currency and technology lifecycle management, including operating system upgrades, hardware refreshes, software modernization, and technical debt remediation.
Oversee program financials, including budget planning, forecasting, resource allocation, vendor management, and investment prioritization.
Drive accountability for delivery commitments, remediation targets, regulatory obligations, and risk reduction objectives across stakeholders.
Advance program governance and executive decision-making by adopting Artificial Intelligence (AI), automation, predictive analytics, and data-driven insights.
Identify opportunities to automate project management artifacts, executive reporting, risk tracking, and portfolio management processes.
Support implementation of approved cyber security tools and propose new or improved security solutions or emerging technologies.
Develop and maintain integrated project roadmaps, execution strategies, governance models, and operating frameworks for successful delivery.
Establish and maintain portfolio governance processes to manage risks, dependencies, resources, financial performance, and delivery outcomes across multiple initiatives.
Ensure projects focus on business outcomes and measurable value realization using critical success criteria (CSC), key risk indicators (KRI), and executive reporting.
Support Cyber Security compliance and identify opportunities to increase the efficiency of Cyber Security policies and procedures.
Coordinate across multiple projects and workstreams while managing competing priorities and resource constraints.
Identify significant cyber security threats and vulnerabilities, define appropriate controls, and document business response.
Communicate changes to cyber security regulations and standards with Business and Program owners.
Manage team deadlines, deliverables, planning, budgeting, and policy formulation, including short-term resource planning.
Drive enterprise vulnerability management programs, including remediation governance processes, vulnerability tracking, planning, exception management, and executive reporting.
Partner with technology teams to ensure timely remediation of high-risk vulnerabilities aligned to remediation service level objectives (SLOs).
Lead patch management governance across infrastructure, cloud, middleware, databases, operating systems, and applications.
Monitor remediation trends, aging vulnerabilities, and risk reduction targets, escalating issues as appropriate.
Lead cross-functional network security transformation initiatives, including network segmentation, firewall modernization, secure connectivity, Zero Trust adoption, and remediation of network security risks and technical debt.
Provide regular updates to senior management and governance forums, escalating key risks, issues, dependencies, and strategic decisions requiring executive attention.

Required Qualifications

Experience: 10+ years of relevant experience
Security knowledge: In-depth knowledge across core security domains
Governance and execution: Experience implementing governance frameworks, executive reporting processes, and project management best practices
Modern tools: Experience leveraging AI, automation, analytics, and modern reporting technologies within project and portfolio management functions
Stakeholder skills: Excellent communication, negotiation, leadership, and relationship management skills
Regulatory exposure: Experience supporting regulatory, audit, risk, and compliance remediation initiatives
Network security understanding: Firewalls, IDS/IPS, segmentation, secure remote access, and Zero Trust principles
Transformation delivery: Proven ability to deliver cross-functional transformation programs across Cybersecurity, Infrastructure, Engineering, and Operations organizations
Risk and architecture knowledge: Strong understanding across Cybersecurity, Technology Risk Management, Infrastructure Engineering, Technology Operations, Cloud Technologies, Network Security, Zero Trust Architecture, Operational Resilience, Infrastructure Lifecycle Management, Enterprise Governance, and Enterprise Architecture
Vulnerability management: Knowledge of vulnerability management frameworks, CVSS scoring methodologies, remediation service level objectives (SLOs), risk acceptance processes, and cyber risk reduction metrics
Program scale: Experience leading large-scale cybersecurity remediation, vulnerability reduction, infrastructure currency, operating system upgrade, technology lifecycle management, and regulatory compliance programs
Portfolio leadership: Experience managing multi-million-dollar portfolios and complex cross-functional delivery organizations
Executive influence: Demonstrated ability to influence senior executives and drive outcomes without direct authority
Financial management: Budgeting, forecasting, resource planning, and benefits realization
Leadership communication: Experience presenting to senior leadership, executive governance forums, operating committees, and regulatory stakeholders

Preferred Qualifications

Professional cyber security certifications are highly desirable, such as CISSP, CISM, and GCIH
Master’s Degree preferred (MBA, Information Systems, Cybersecurity, Data Analytics, Artificial Intelligence, or related field)
Certifications preferred: PMP, PgMP, CISM, CISSP, SAFe, Agile, or equivalent

Technologies

Artificial Intelligence (AI), automation, predictive analytics, data-driven insights
CISSP, CISM, GCIH
Firewalls, IDS/IPS
Zero Trust, Zero Trust Architecture
CVSS
Remediation service level objectives (SLOs)
PMP, PgMP
SAFe, Agile

Education

Bachelor’s degree in information technology, Computer Science, Engineering, Cybersecurity, Business Management, or a related discipline
Master’s Degree preferred (MBA, Information Systems, Cybersecurity, Data Analytics, Artificial Intelligence, or related field)

Benefits

Medical, dental & vision coverage
401(k)
Life, accident, and disability insurance
Wellness programs
Paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays

Application and Posting Details

Anticipated posting close date: Oct 28, 2026

Automated Processing and AI Notice

Automated processing, including artificial intelligence, may be used for legitimate business purposes to identify and align the candidate’s skills and abilities with the job opening.
If the candidate chooses or consents, skills and abilities can be matched to other suitable roles at Citi.
Automated processing and AI do not involve relying on automatic or autonomous decision-making.
Refer to jurisdictional considerations with specific provisions for the country for further details.
Illinois residents: AI Notice and Right