Manager, Cyber Assurance
The Manager, Cyber Assurance is responsible for establishing, leading, and continuously maturing the enterprise cybersecurity continuous control testing program. This role oversees the strategy, governance, execution, and continuous improvement of assurance activities designed to evaluate the effectiveness of cybersecurity controls, identify control deficiencies and control drift, and validate alignment with enterprise security policies, standards, regulatory requirements, and risk management objectives.
The Manager leads a team of cybersecurity professionals responsible for planning and executing technical control assessments, control effectiveness reviews, assurance testing, reporting, and remediation oversight across the cybersecurity control environment. This role also provides leadership for talent acquisition, workforce development, documentation management, program governance, metrics, reporting, and stakeholder engagement to help maintain a strong and resilient cybersecurity posture.
This position is ideal for a cybersecurity assurance leader who understands how to build and deliver risk informed assurance over cybersecurity controls while continuously improving enterprise cyber resilience.
Work Arrangement
Candidates must be willing to work a hybrid schedule of 4 days onsite and 1 day remote per week. Remote work is not available for this position.
Eligible hub locations include:
• Phoenix, AZ
• Charlotte, NC
• Johnston, RI
• Boston, MA
• Westwood, MA
• Marlton, NJ
• Irving, TX
Primary Responsibilities
• Lead the strategy, governance, maturity, and continuous improvement of the Cyber Security Assurance Program aligned to enterprise cybersecurity, risk, and resilience objectives.
• Oversee planning, execution, and quality assurance of cybersecurity control testing to validate control design, implementation, and operating effectiveness.
• Define and govern critical asset identification, enhanced control requirements, and assurance activities for the organization's most critical assets.
• Establish and maintain assurance methodologies, standards, testing frameworks, documentation, and quality controls to ensure consistency, repeatability, and audit readiness.
• Monitor threats, emerging technologies, regulatory developments, and business changes to identify impacts to the control environment and assurance strategy.
• Define and report key performance indicators, key risk indicators, control effectiveness measures, testing coverage, and maturity metrics to demonstrate program performance and risk posture.
• Oversee the development of assurance reports, executive dashboards, findings, trend analysis, and recommendations that drive informed decision making and continuous improvement.
• Ensure control deficiencies, control drift, failures, and related risks are documented, tracked, remediated, and validated through sustainable resolution.
• Lead and develop a high performing team through workforce planning, hiring, coaching, mentoring, succession planning, and career development.
• Partner with Technology, Risk, Compliance, control owners, and business stakeholders to align assurance activities with enterprise priorities and regulatory expectations.
Required Qualifications
• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent combination of education and experience.
• 8 to 12 years of progressive experience in cybersecurity, cyber risk, cybersecurity assurance, controls testing, audit, or related disciplines.
• 3 or more years of people leadership experience managing cybersecurity assurance, controls, risk, or audit professionals.
• Experience assessing, testing, and validating cybersecurity controls across technology environments.
• Strong understanding of cybersecurity control frameworks, risk management principles, and security governance practices.
• Experience developing and managing enterprise programs, governance processes, metrics, and reporting.
• Knowledge of NIST Cybersecurity Framework, NIST standards, Cyber Risk Institute (CRI) Profile, and cybersecurity maturity frameworks.
• Experience working within large, complex, and highly regulated organizations.
• Demonstrated ability to influence senior leaders and drive cross functional collaboration.
Preferred Qualifications
• Familiarity with continuous controls monitoring, security validation technologies, and cyber control assessment methodologies.
• Experience building and maturing cybersecurity assurance or controls testing programs.
Certifications
Relevant industry certifications are preferred, including but not limited to:
• CISSP, Certified Information Systems Security Professional
• CISM, Certified Information Security Manager
• CRISC, Certified in Risk and Information Systems Control
• CISA, Certified Information Systems Auditor
• GSLC, GIAC Security Leadership Certification
• Emerging AI or cybersecurity focused certifications
Pay Transparency
The salary range for this position is from $175,000 to $221,000 per year, plus an opportunity to earn an annual discretionary bonus. Actual pay is based on various factors including but not limited to, the budget, work location, relevant skills, and experience.
We offer competitive pay, comprehensive medical, dental, and vision coverage, retirement benefits, maternity and paternity leave, flexible work arrangements, education reimbursement, wellness programs, and more. Citizens’ paid time off policy exceeds the mandatory paid sick or paid time away policies of local and state jurisdictions in the United States. For an overview of our benefits, visit our Careers site - https://jobs.citizensbank.com/benefits.
#LI-Citizens1
Equal Employment Opportunity
Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.
Equal Employment and Opportunity Employer
Job Applicant Data Privacy Policy
Background Check
Any offer of employment is conditioned upon the candidate successfully passing a background check, which may include initial credit, motor vehicle record, public record, prior employment verification, and criminal background checks. Results of the background check are individually reviewed based upon legal requirements imposed by our regulators and with consideration of the nature and gravity of the background history and the job offered. Any offer of employment will include further information.
Skills Required
- Bachelor's degree in Security, Computer Science, Information Technology, or a related field, or equivalent education and experience.
- 8 to 12 years of progressive experience in cybersecurity, cyber operations, incident response, threat intelligence, resilience, security program management, or a related discipline.
- At least 3 years of people leadership and talent management experience.
- Experience designing, facilitating, executing, and evaluating cybersecurity exercises and simulations.
- Strong understanding of cyber defense, incident response, threat intelligence, vulnerability management, and operational resilience.
- Experience developing and managing enterprise programs, governance processes, metrics, and reporting.
- Knowledge of the NIST Cybersecurity Framework and Standards, CRI Profile, and cybersecurity exercise frameworks.
- Experience working within large, complex, highly regulated organizations.
- Demonstrated ability to influence senior leaders and drive collaboration across functions.
- Relevant industry certifications such as CISSP, CISM, CRISC, CBCP, or emerging AI and security-focused credentials.
- Ability to work onsite four days per week and remotely one day per week at an approved hub location.
Citizens Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Citizens and has not been reviewed or approved by Citizens.
-
Parental & Family Support — Policies include six weeks of fully paid parental leave for all parents, up to 16 weeks for birthing parents, 10 days of emergency back‑up care, and adoption assistance of more than $25,000. Recognition for adoption support underscores a strong family‑friendly posture.
-
Leave & Time Off Breadth — Time off includes 11 paid holidays and up to 27 PTO days. The breadth of leave is presented as generous versus many peers.
-
Healthcare Strength — Medical, dental, and vision options pair with an HSA that includes a company contribution, plus mental‑health access via Spring Health (eight no‑cost sessions), Hinge Health, wellness programs, and discounted gyms. Eligibility at 20+ hours per week broadens access to these resources.
Citizens Insights
What We Do
As one of the oldest and largest financial services firms in the United States with a history dating back to 1828, we’re committed to providing solutions and expertise that support our customers, clients, colleagues, and communities in what’s next on their own unique journey. We invest in the humans who build the logic, ideas, and innovations that bring new technologies to life. Investments in AI, cloud computing, machine learning and automation provide our engineers the tools that enable us to remain competitive and win in today’s environment. At Citizens, we recognize that the journey to accomplishment is no longer linear and that individuals are made of all they have done and all they are going to do. Whether you’re considering banking with us or looking to work with us, you’ll find a customer-centric culture and a supportive, collaborative workforce at Citizens. You’re made ready and so are we. If you're ready to advance your career in technology and security, learn more about opportunity's Citizens offers here: https://jobs.citizensbank.com/digital-transformation
Why Work With Us
We empower the colleagues that power our tech. With growth & upskilling opportunities and sought-after benefits, plus a diverse culture of people and perspectives, we help our colleagues achieve career goals. Because innovation can’t happen without the minds and hearts of our people. Technology is constantly evolving, and we believe you can too.
Gallery
