Senior Program Manager, Cybersecurity & Technology Risk

About Citi: Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management. As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services. Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together. The Role: The Senior Program Manager, Cybersecurity & Technology Risk is a strategic program leadership role accountable for driving the planning, governance, execution, and delivery of Citi's enterprise-wide Post Quantum Readiness Program. This individual will build and maintain the multi-year program plan, coordinate across Cyber, Technology, Infrastructure, Engineering, Architecture, Operations, and Business stakeholders, and manage critical dependencies with external vendors whose quantum roadmaps directly affect Citi's migration timeline. The role carries significant external visibility, including regular engagement with regulators such as the OCC, FRB, FDIC, FCA, Hong Kong Monetary Authority, and Monetary Authority of Singapore. Success in this position requires translating complex technical and cryptographic concepts into executive-ready governance reporting, risk assessments, and actionable roadmaps. This is a highly visible, cross-functional role that directly supports Citi's security posture, operational resilience, and regulatory standing as the organization accelerates its mobilization for Post Quantum migration. Responsibilities Build and maintain the PQC Readiness multi-year program plan, including workstreams, migration phases and waves, milestones, critical path identification, and dependencies on vendors, platforms, and standards. Develop and communicate a risk-based, data-driven governance strategy for the Quantum Readiness Program in partnership with architecture, engineering, operations, and information security stakeholders. Maintain integrated roadmaps, execution strategies, and operating frameworks to support successful delivery. Run the program's operating process, including working group cadence, meeting management, and minutes circulation. Track decisions and escalation paths, and prepare materials for Senior and Executive Management reporting. Produce and maintain the single source of truth for program status, with consistent reporting on KPIs, KRIs, and critical success criteria for governance, leadership, internal audit, and regulators. Turn prioritized PQ readiness assessments into dated commitments from application and infrastructure owners. Track delivery against roadmaps and escalate issues and delays. Align sequencing across shared infrastructure and platforms, such as PKI, HSM (Hardware Security Module), and KMS (Key Management Services), so downstream teams are prepared. Proactively coordinate stakeholders, follow up on action items, and remove blockers. Track critical vendor PQC roadmaps and delivery dates using tools including Confluence and Jira. Fold vendor roadmap updates into program planning and escalate issues and delays. Coordinate activities across multiple projects and workstreams while managing competing priorities and resource constraints. Manage internal deadlines, deliverables, and planning for dependent work efforts. Engage regularly with internal teams and external parties to identify Quantum Readiness roadmap deficiencies and communicate impacts to overall program health. Respond to the increasing frequency of internal and external regulatory requests on program readiness and alignment. Facilitate the implementation of approved cyber security tools and identify new or improved security solutions or emerging technologies. Communicate changes to cyber security regulations and standards with business and program owners. Develop Corrective Action Plans for remediation gaps and monitored issues through to completion. Plan communications and training so teams understand what is required of them, when, and where to get help. Build internal relationships and drive program-level timelines and requirements across the Enterprise and globally. Appropriately assess risk when business decisions are made, with particular consideration for the firm's reputation. Drive compliance with applicable laws, rules, and regulations, and apply sound ethical judgment regarding personal conduct. Escalate, manage, and report control issues with transparency, and effectively supervise the activity of others, creating accountability with those who fail to maintain these