Data Security Product Group Manager

The Data Security Product Group Manager is a senior management level position responsible for accomplishing results through the effective leadership and management of a team of 8-10 direct reports, primarily individual contributors. This critical role focuses on using specific cybersecurity and data security product knowledge to identify and track product gaps, engage with Engineering and Architecture counterparts to research potential new products, while enhancing Data Security Applications and processes within the CISO organization.

The overall objective of this role is to ensure the strategic execution of Information Security directives and activities in alignment with Citi's robust data security policy, driving continuous improvement in both product effectiveness and process efficiency.

Responsibilities

• Product Management & Optimization:

  • Review and analyze existing Data Security applications to track performance against product vision and strategy.

  • Develop a deep understanding of current Data Security Applications within the organization, identifying opportunities for enhancement and optimization.

  • Drive initiatives focused on improving application cost efficiency while maintaining or enhancing security posture.

• Process Improvement & Coordination:

  • Collaborate with various program teams to conduct deep dives into key InfoSec processes, particularly within CISO Data Security operations.

  • Identify and implement significant process improvement opportunities, ensuring a clear understanding of current workflows and pain points.

  • Coordinate effectively with necessary program owners and stakeholders to implement process changes and achieve desired outcomes.

• Team Leadership & Management:

  • Lead, mentor, and manage a complex team of 8-10 Data Security subject matter experts, fostering their professional growth and ensuring high performance.

  • Oversee budget allocation, policy formation, and strategic planning for the team's initiatives and projects.

• Security Oversight & Advisement:

  • Coordinate application testing efforts that support protecting the confidentiality, integrity, and availability of business information stored and processed across systems.

  • Educate and advise business and technical leaders on the development, delivery, and management of robust security solutions.

  • Define and implement security policies and standards, providing periodic Information Security (IS) management reports to senior leadership.

  • Provide expert security oversight for major system designs and monitor the effective implementation of approved Corrective Action Plans.

  • Plan and implement IS administration for Information Technology (IT) projects, and plan short to medium term IS actions and resource allocation.

  • Contribute to the evaluation and selection of applications and systems, focusing comprehensively on their Information Security implications.

• Risk Management & Compliance:

  • Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients, and assets.

  • Drive compliance with applicable laws, rules, and regulations, adhering strictly to Policy.

  • Apply sound ethical judgment regarding personal behavior, conduct, and business practices.

  • Escalate, manage, and report control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards.

Qualifications

• 10+ years of relevant experience in Information Security, with a significant portion in a leadership or management capacity focused on CISO Data Security operations.

• Strong technical background in Data Security concepts and technologies, including but not limited to Data Loss Prevention (DLP), data encryption (at rest and in transit), data masking, data tokenization, and data access governance.

• Demonstrated experience with security architecture and engineering principles, particularly in designing and implementing secure data platforms and applications.

• Proven experience with various database technologies (relational, NoSQL) and securing data within them.

• Familiarity with common security frameworks and standards such as NIST, ISO 27001, PCI DSS, GDPR, and other relevant regulatory compliance requirements.

• Hands-on experience with Security tools and Platforms used for vulnerability management, security information and event management (SIEM), intrusion detection/prevention systems (IDS/IPS), and cloud security posture management (CSPM).

• Understanding of networking protocols, operating systems (Linux/Windows), and cloud environments (e.g., AWS, Azure, GCP) from a security perspective.

• Advanced analytical and problem-solving skills, with a demonstrated ability to identify and resolve complex security challenges.

• Consistently demonstrates clear, concise, and persuasive written and verbal communication skills, able to articulate complex technical issues to both technical and non-technical audiences.

• Proficient in interpreting and applying security policies, standards, and procedures in a large enterprise environment.

• Demonstrated ability to remain unbiased and foster an inclusive environment in a diverse working environment.

• Additional Technical Certifications (e.g., CISSP, CISM, CISA, CCSP, GSEC, CompTIA Security+) are highly preferred.

Education:

Bachelor's degree or higher in Information Technology, Computer Science, Telecommunications, or related fields.

------------------------------------------------------

Job Family Group:

Technology

------------------------------------------------------

Job Family:

Information Security

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Primary Location:

Tampa Florida United States

------------------------------------------------------

Primary Location Full Time Salary Range:

$141,440.00 - $212,160.00

In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.

------------------------------------------------------

Most Relevant Skills

Please see the requirements listed above.

------------------------------------------------------

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

------------------------------------------------------

Anticipated Posting Close Date:

Nov 03, 2025

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.