Cybersecurity & Infrastructure Senior Program Management Lead

The Cybersecurity & Infrastructure Senior Program Management Lead will oversee complex cybersecurity and infrastructure modernization programs, driving governance, execution, delivery, and measurable risk reduction across enterprise technology initiatives.

Location and Employment

• Location: Irving, TX (onsite)
• Employment type: Full time
• Job family group: Technology
• Job family: Digital Technical Program Management
• Primary location: Irving Texas United States

Compensation

• Salary range: USD 169,600 - 254,400 per year

Key Responsibilities

• Partner with senior leaders across Cybersecurity, Infrastructure, Engineering, Risk, Compliance, and Operations to set priorities, resolve dependencies, and align strategy.
• Build executive-level dashboards and reporting to improve program transparency across health, risk reduction, vulnerability remediation, infrastructure currency, and business outcomes.
• Lead infrastructure currency and technology lifecycle management, including operating system upgrades, hardware refreshes, software modernization, and technical debt remediation.
• Oversee program financials, including budget planning, forecasting, resource allocation, vendor management, and investment prioritization.
• Drive accountability for delivery commitments, remediation targets, regulatory obligations, and risk reduction objectives across stakeholders.
• Advance program governance and executive decision-making by adopting Artificial Intelligence (AI), automation, predictive analytics, and data-driven insights.
• Identify opportunities to automate project management artifacts, executive reporting, risk tracking, and portfolio management processes.
• Support implementation of approved cyber security tools and propose new or improved security solutions or emerging technologies.
• Develop and maintain integrated project roadmaps, execution strategies, governance models, and operating frameworks for successful delivery.
• Establish and maintain portfolio governance processes to manage risks, dependencies, resources, financial performance, and delivery outcomes across multiple initiatives.
• Ensure projects focus on business outcomes and measurable value realization using critical success criteria (CSC), key risk indicators (KRI), and executive reporting.
• Support Cyber Security compliance and identify opportunities to increase the efficiency of Cyber Security policies and procedures.
• Coordinate across multiple projects and workstreams while managing competing priorities and resource constraints.
• Identify significant cyber security threats and vulnerabilities, define appropriate controls, and document business response.
• Communicate changes to cyber security regulations and standards with Business and Program owners.
• Manage team deadlines, deliverables, planning, budgeting, and policy formulation, including short-term resource planning.
• Drive enterprise vulnerability management programs, including remediation governance processes, vulnerability tracking, planning, exception management, and executive reporting.
• Partner with technology teams to ensure timely remediation of high-risk vulnerabilities aligned to remediation service level objectives (SLOs).
• Lead patch management governance across infrastructure, cloud, middleware, databases, operating systems, and applications.
• Monitor remediation trends, aging vulnerabilities, and risk reduction targets, escalating issues as appropriate.
• Lead cross-functional network security transformation initiatives, including network segmentation, firewall modernization, secure connectivity, Zero Trust adoption, and remediation of network security risks and technical debt.
• Provide regular updates to senior management and governance forums, escalating key risks, issues, dependencies, and strategic decisions requiring executive attention.

Required Qualifications

• Experience: 10+ years of relevant experience
• Security knowledge: In-depth knowledge across core security domains
• Governance and execution: Experience implementing governance frameworks, executive reporting processes, and project management best practices
• Modern tools: Experience leveraging AI, automation, analytics, and modern reporting technologies within project and portfolio management functions
• Stakeholder skills: Excellent communication, negotiation, leadership, and relationship management skills
• Regulatory exposure: Experience supporting regulatory, audit, risk, and compliance remediation initiatives
• Network security understanding: Firewalls, IDS/IPS, segmentation, secure remote access, and Zero Trust principles
• Transformation delivery: Proven ability to deliver cross-functional transformation programs across Cybersecurity, Infrastructure, Engineering, and Operations organizations
• Risk and architecture knowledge: Strong understanding across Cybersecurity, Technology Risk Management, Infrastructure Engineering, Technology Operations, Cloud Technologies, Network Security, Zero Trust Architecture, Operational Resilience, Infrastructure Lifecycle Management, Enterprise Governance, and Enterprise Architecture
• Vulnerability management: Knowledge of vulnerability management frameworks, CVSS scoring methodologies, remediation service level objectives (SLOs), risk acceptance processes, and cyber risk reduction metrics
• Program scale: Experience leading large-scale cybersecurity remediation, vulnerability reduction, infrastructure currency, operating system upgrade, technology lifecycle management, and regulatory compliance programs
• Portfolio leadership: Experience managing multi-million-dollar portfolios and complex cross-functional delivery organizations
• Executive influence: Demonstrated ability to influence senior executives and drive outcomes without direct authority
• Financial management: Budgeting, forecasting, resource planning, and benefits realization
• Leadership communication: Experience presenting to senior leadership, executive governance forums, operating committees, and regulatory stakeholders

Preferred Qualifications

• Professional cyber security certifications are highly desirable, such as CISSP, CISM, and GCIH
• Master’s Degree preferred (MBA, Information Systems, Cybersecurity, Data Analytics, Artificial Intelligence, or related field)
• Certifications preferred: PMP, PgMP, CISM, CISSP, SAFe, Agile, or equivalent

Technologies

• Artificial Intelligence (AI), automation, predictive analytics, data-driven insights
• CISSP, CISM, GCIH
• Firewalls, IDS/IPS
• Zero Trust, Zero Trust Architecture
• CVSS
• Remediation service level objectives (SLOs)
• PMP, PgMP
• SAFe, Agile

Education

• Bachelor’s degree in information technology, Computer Science, Engineering, Cybersecurity, Business Management, or a related discipline
• Master’s Degree preferred (MBA, Information Systems, Cybersecurity, Data Analytics, Artificial Intelligence, or related field)

Benefits

• Medical, dental & vision coverage
• 401(k)
• Life, accident, and disability insurance
• Wellness programs
• Paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays

Application and Posting Details

• Anticipated posting close date: Oct 28, 2026

Automated Processing and AI Notice

• Automated processing, including artificial intelligence, may be used for legitimate business purposes to identify and align the candidate’s skills and abilities with the job opening.
• If the candidate chooses or consents, skills and abilities can be matched to other suitable roles at Citi.
• Automated processing and AI do not involve relying on automatic or autonomous decision-making.
• Refer to jurisdictional considerations with specific provisions for the country for further details.
• Illinois residents: AI Notice and Right