Cybersecurity & Infrastructure Senior Program Management Lead

The Cybersecurity & Infrastructure Senior Program Management Lead is responsible for leading the strategy, planning, governance, execution, and delivery of complex cybersecurity, infrastructure modernization, vulnerability management, patching, network security, operational resilience, and technology transformation programs. The role serves as a strategic partner to senior technology and cybersecurity leaders, driving initiatives that strengthen the firm's security posture, infrastructure health, technology currency, regulatory compliance, and enterprise risk management objectives. This individual will lead cross-functional programs spanning Cybersecurity, Infrastructure, Network Engineering, Cloud, Architecture, Operations, Risk, and Business organizations to ensure successful execution of enterprise priorities. The role requires a combination of strategic thinking, technical knowledge, program leadership, stakeholder management, and executive communication skills to drive measurable business outcomes across a highly regulated and complex environment. The successful candidate will possess deep experience managing enterprise-scale technology and cybersecurity initiatives, including infrastructure currency, vulnerability remediation, patch management, network security modernization, operational resilience, and technology risk reduction programs.  Responsibilities Partner with senior leaders across Cybersecurity, Infrastructure, Engineering, Risk, Compliance, and Operations to establish priorities, resolve dependencies, and drive strategic alignment. Develop executive-level dashboards and reporting to provide transparency into program health, risk reduction, vulnerability remediation progress, infrastructure currency, and business outcomes. Lead infrastructure currency and technology lifecycle management initiatives, including operating system upgrades, hardware refreshes, software modernization, and technical debt remediation. Oversee program financials, including budget planning, forecasting, resource allocation, vendor management, and investment prioritization. Drive accountability across stakeholders for delivery commitments, remediation targets, regulatory obligations, and risk reduction objectives. Drive adoption of Artificial Intelligence (AI), automation, predictive analytics, and data-driven insights to improve program governance, risk management, executive reporting, operational efficiency, and decision-making. Identify opportunities to automate project management artifacts, executive reporting, risk tracking, and portfolio management processes. Facilitate the implementation of approved cyber security tools and identify and propose new or improved security solutions or emerging technologies. Develop and maintain integrated project roadmaps, execution strategies, governance models, and operating frameworks to support successful delivery. Establish and maintain portfolio governance processes to manage risks, dependencies, resource allocation, financial performance, and delivery outcomes across multiple strategic initiatives. Ensure projects are managed with a clear focus on business outcomes, critical success criteria (CSC), key risk indicators (KRI), measurable value realization, and executive reporting. Ensure Cyber Security compliance and seek opportunities to enhance the efficiency of Cyber Security policies and procedures. Coordinate activities across multiple projects, and workstreams while managing competing priorities and resource constraints. Identify significant Cyber Security threats and vulnerabilities, and define appropriate controls for discovered threats, documenting the business response. Communicate and discuss changes to cyber security regulations and standards with Business and Program owners. Manage program deadlines, deliverables, planning, budgeting, and policy formulation for the team, including short-term resource planning. Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards. Drive enterprise vulnerability management programs and remediation governance processes. Experience leading programs focused on operational resilience, business continuity, disaster recovery, platform recoverability, and technology resiliency. Proven ability to build consensus, influence decision-making, and drive alignment across senior technology, cybersecurity, infrastructure, and business stakeholders. Oversee vulnerability tracking, remediation planning, exception management, and executive reporting. Partner with technology teams to ensure timely remediation of high-risk vulnerabilities and adherence to remediation service level objectives (SLOs). Lead patch management governance across infrastructure, cloud, middleware, databases, operating systems, and applications. Monitor remediation trends, aging vulnerabilities, and risk reduction targets, escalating issues as appropriate. Lead cross-functional network security transformation initiatives, including network segmentation, firewall modernization, secure connectivity, Zero Trust adoption, and remediation of network-related security risks and technical debt. Provide regular updates to senior management and governance forums, escalating key risks, issues, dependencies, and strategic decisions requiring executive attention. Qualifications 10+ years of relevant experience. In-depth knowledge across core security domains Professional cyber security certifications (such as CISSP, CISM, GCIH) are hig