Cyber Risk Sr. Group Manager, Director

Citi’s Technology and Cyber Compliance and Operational Risk Office (TCCORO) serves as the firm’s reliable second set of eyes. Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report, and manage operational and compliance risks while promoting actions to address root causes that may lead to unintended operational losses or regulatory breaches. TCCORO provides specialist subject matter expertise to challenge Enterprise, Infrastructure, Operations, and Technology entities across the firm. We act as the technology and cyber conscience of the bank, ensuring internal controls mitigate technology and cyber risks in alignment with our risk appetite under the Operational Risk Management (ORM) and Independent Compliance Risk Management (ICRM) frameworks.

About the role

The Head of Cyber Risk and Compliance – Threat Intelligence and Fusion reports to the Head of Cyber Risk and Compliance within TCCORO and will provide leadership for the Cyber Risk and Compliance – Threat Intelligence and Fusion function. This role is accountable for managing complex, critical professional disciplinary areas and will oversee multiple teams through other managers. The position is responsible for establishing and executing the functional strategy, leveraging cyber subject matter expertise (particularly in security operations processes), business experience, data analysis, and industry trends to inform risk prioritization and second-line challenge activities. The role actively collaborates with ORM, Compliance partners, and other stakeholders to provide subject matter expertise aligned with operational and compliance risk management frameworks.

Responsibilities

• Manages a staff of risk officers at various levels, with direct accountability for hiring, organizational structure, compensation, performance appraisals, staff development, and training.
• Provides input on performance and compensation recommendations for risk officers and matrixed service providers.
• Accountable for internal projects on threat issues supporting stakeholders and measuring the effectiveness of Citi’s first-line defenses.
• Evaluates control design and communicates the impact of control weaknesses to first-line teams and control implementers.
• Oversees the establishment and implementation of compliance and cyber policies, procedures, technology, tools, and governance processes for coverage domains.
• Provides governance and oversight of cyber risk, supporting policy and standards development; oversees Key Operational Risks, challenges risk self-assessments and scenario analysis, and manages issue escalations.
• Leads second-line influence, advisory, and challenge of operational security capabilities, including security incident management, vulnerability management, and cyber threat intelligence.
• Represents TCCORO in steering committees, working groups, and councils relevant to the functional area.
• Engages in industry discussions on the latest cyber risk and emerging operational risks.
• Oversees planning and implementation of cyber programs, including governance, risk identification, and control frameworks.
• Implements guidance for overseeing cyber operational risks, aligned with OCC Heightened Standards and other global regulations.
• Leads discussions with key regulators, internal and external auditors, and advises on best practices using expertise and industry insights.
• Reviews and challenges coverage areas to appropriately consider significant operational risk in Management Control Assessments (MCAs).
• Evaluates first-line alignment with internal and external control standards, regulatory, and audit requirements.
• Assesses risk in business decisions, demonstrating knowledge of the firm’s reputation and safeguarding Citigroup, its clients, and assets by driving compliance with applicable laws, rules, and regulations, adhering to Policy, and applying sound ethical judgment.

Requirements

• 15+ years of relevant technical experience and experience managing a team of professionals.
• Practical experience managing, assessing, or auditing security operations processes and technologies, including SOC, SIEM, Fusion Center, Incident Response, and Insider Risk.
• In-depth knowledge of products within the coverage area, including technical understanding of current and emerging trends and their business impacts.
• Experience in cyber risk assessments, metrics, enterprise technology services, risks, and controls within globally complex, dispersed, and diverse organizations.
• In-depth knowledge of cyber risks and controls across information system architecture and engineering domains, including data protection, identity and access management, vulnerability management, network security, endpoint security, logging and monitoring, incident management, insider risk, and third-party management; preferred expertise in security operations and artificial intelligence.
• Subject matter expertise in one or more industry-standard risk management frameworks (e.g., ISO27001, COBIT, TOGAF, CRI) and an in-depth understanding of cyber risk mitigation strategies.
• Self-motivated and goal-oriented, with the ability to seize initiative, garner consensus, and develop and implement effective strategies; demonstrates analytical rigor in formulating strategies, goals, and measuring results.
• Sense of urgency in implementing programs and evaluating priorities; decisive, action-oriented, and practical.
• Willingness to challenge and question the status quo, making recommendations for optimal solutions.
• Demonstrated strategic thinking skills, organizational astuteness, and influencing, collaboration, and communication abilities.
• Personal presence, intellect, energy, and drive to succeed in a high-performance environment.
• Ability to analyze and think through highly complex issues while executing seamlessly against a well-thought-out framework.
• Comfortable operating as a global citizen across geographies, regions, and cultures.
• Strong leadership, communication, and presentation skills, with the ability to adapt style to suit diverse audiences.

Qualifications

• Bachelor’s degree required; Master’s degree preferred.
• Relevant certifications (e.g., CISM, CRISC, CISSP, CISA) are a plus.

Pay

$170,000.00 - $300,000.00 annual salary. In addition to salary, eligible employees may receive discretionary and formulaic incentive and retention awards.

Benefits

• Medical, dental, and vision coverage.
• 401(k) retirement plan.
• Life, accident, and disability insurance.
• Wellness programs.
• Paid time off, including vacation, sick leave, and holidays.

Available offerings may vary by jurisdiction, job level, and date of hire.

Schedule

Full time.

Primary location: New York, New York, United States.