Why Citi

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations & Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.

Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.

Why This Team

The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients', our revenue, our employees and our proprietary data. We manage information security as one end-to end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the businesses and functions.

Why This Role

The Head of Cybersecurity Technology & AI Security Engineering is an executive level position responsible for delivering technology solutions in support of Citi’s core cybersecurity teams, including the critical cybersecurity operations organization. This includes overseeing architecture, product management, engineering and technology operations for the tools and products that help deliver our core cybersecurity capabilities. In addition, the role leads the AI security engineering capability to leverage AI to transform the way cybersecurity capabilities and services are delivered and to empower an AI led cyber workforce. This role reports to the Chief Information Security Officer: Business, Functions & Technology (BFT). The person must be a strong leader, with deep integrity and ethics, and understand the power in human centered leadership and the potential of high performing teams.

What You Bring

Deep, demonstrable experience leading security engineering and operations at scale — not just policy and governance.

A track record of building and mentoring high-performing, diverse security teams.

Hands-on fluency across cloud-native architectures (Kubernetes, Terraform, service mesh), modern CI/CD, and infrastructure-as-code.

A sharp understanding of the AI threat landscape, including risks specific to generative AI and large language models.

Experience operating or transforming a SOC — with a bias toward automation, detection engineering, and measurable outcomes.

Strong DFIR fundamentals and the ability to lead under pressure during major incidents.

Active engagement with the open-source security community — whether as a contributor, maintainer, or power user of projects like Sigma, Velociraptor, Falco, MISP, Semgrep, or similar.

The ability to communicate risk to boards and business leaders without reliance on jargon or frameworks.

What Sets You Apart

You've built security programs & platforms, not just inherited them.

You default to engineering solutions over checkbox compliance.

You default to engineering solutions to problems vs purchasing tools

You attract talent because people want to work with you, not for you.

You treat threat intelligence as an input to action, not a report.

You've contributed to or actively leverage open-source security tooling — you understand the community, not just the vendor landscape.

You've operated successfully in challenging environments and have the medals and scars to prove it.

Why This Role Is Different

This isn't a CISO seat where you'll spend your time in administration . You will be expected to be close to the work — to understand the code, the architecture, the threats, and find solutions. You'll have the mandate and the backing to build something meaningful. We want a leader who makes security a competitive advantage.

Responsibilities:

Build, mentor and inspire a high performing cybersecurity team, growing both the current and the next generation of leadership talent

Lay out a clear vision for Cybersecurity Technology in partnership with the leaders of Cyber Security Operations, BFT-CISO, and Cyber Risk and Controls.

Lead significant initiatives within and help deliver the CISO and BFT cyber strategies, and securely enable business and technology activities and programs

Work with the assigned Enterprise Security Architects, vendors and engineers to develop and document an effective architecture that aligns with Citi’s architecture principles and overall Enterprise Architecture.

Lead a product mgmt. function that engages stakeholders to prioritize features and capabilities in the Cybersecurity Technology roadmap, delivering value and user experience.

Build an AI capability that maintains an “agent first” mindset to solve security problems

Manage the budget, resource planning, and delivery of end results through executing the functional strategy

Leverage the team to rapidly respond to emerging threats, security incidents and critical business activities

Lead and securely enable significant business change in complex global environments, managing complex multiple risk dimensions

Partner with peer leadership to drive cyber strategy and unify global processes and functions

Implement an effective problem management process to identify recurring issues or potential upcoming issues to assure the long-term effectiveness of the environment.

Maintain a responsible compliance program

Qualifications:

15+ years of relevant experience in an Engineering role in the cybersecurity, digital or AI fields

Experience working in Financial Services or Technology or a large complex and/or global environment

Comprehensive knowledge of design metrics, analytics tools, benchmarking activities and related reporting to identify best practices

Proven track record of building and running resilient service driven technology capabilities

Demonstrated use of driving AI delivery and engineering to transform capabilities and services to deliver value to customers and stakeholders

Proven ability to engage and influence senior stakeholders across business, risk, technology, and governance functions in a banking context.

Demonstrated success in building, leading, and scaling global cybersecurity teams

------------------------------------------------------

Job Family Group:

Technology

------------------------------------------------------

Job Family:

Technology Management

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Primary Location Full Time Salary Range:

€230,000.00 - €420,000.00

------------------------------------------------------

Most Relevant Skills

Please see the requirements listed above.

------------------------------------------------------

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

------------------------------------------------------

Automated Processing and AI

We use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi.

Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.

------------------------------------------------------

This job opening is for an existing job vacancy.

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.

Head of Cybersecurity Technology & AI Security Engineering

Job Description