Technology Senior Security Lead Analyst - Vice President

We are seeking a highly experienced and technically proficient AI-First Engineer to join our team in Mississauga. This is a critical, senior-level individual contributor role for a deep technical expert who can assess Vendor hosted platforms (SaaS, PaaS, IaaS) Architecture, Security guardrails, with our process, policies, controls integration.

The ideal candidate is a passionate, hands-on engineer with strong technical acumen and domain knowledge for secure application deployment in Cloud (SaaS, IaaS, PaaS), and associated controls. Your key stakeholders will be Citi Cloud security domain architects, application development teams, Technology Risk management, external vendor technology team, vulnerability assessment teams. The candidate will work closely with colleagues in other regions to ensure successful operation as a global team using a “follow the sun” service model.

Banking Technology is looking for an experienced ‘Technology Senior Security Analyst’.

Key responsibilities :

• Work closely with Business, Vendor (3rd Party) Senior Management, collaborate as Tech SME to drive product adoption, Citi onboarding of the SaaS/PaaS platform(s)
• Strong leadership skills and ability to mobilize and influence teams, both internal and external that are not in direct reporting line.
• Conduct security assessment of Cloud deployment projects, to ensure security gaps are identified and recommend remediation actions.
• Engage with Citi IS teams to understand IS guidelines for internal and public Cloud usage/adoption
• Work with SaaS vendors to assess the security guardrails for secure deployment of applications in private and public Cloud
• Plan the resolution of any identified vulnerabilities/issues during Citi onboarding, yearly compliance by tracking them towards closure.
• Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions
• Streamlines the Technology support, adoption of the SaaS/PaaS platform.
• Provide deep expertise in modern application architecture
• Embrace an agile, iterative mindset, contribute to the strategic vision for AI in engineering by researching and evaluating new AI technologies, methodologies, and tools to maintain a competitive edge

Here is what you bring -

• 6+ years of experience in Information Security domain, with at least 5+ years of experience as application security consultant / security architect, with focus on assessing secure deployment of SaaS applications
• 4+ years of Software development (Python or Java) experience with Core Spring Framework
• 4+ year of Technology Architect experience Specially Cloud GCP/MS Azure
• 2+ year of Technology Project Management
• Must have SME level knowledge of security guardrails for deploying applications in SaaS and public Cloud environment.
• In depth understanding of public Cloud and application architectures and technologies
• Strong understanding of information security and risk analysis processes, including threat modeling is a huge plus
• Identify opportunities for process improvement
• Deep understanding of information security and risk analysis processes, including vulnerability tests.
• Demonstrated ability to take ownership and work with cross functional teams to manage multiple projects simultaneously under pressure
• Consistently demonstrates clear and concise written and verbal communication as well as presentation skills for interaction with Sr leaders in Technology and business.
• Proficient in interpreting and applying policies, standards and procedures
• Good interpersonal skills with a natural ability to work with various teams, ability to adapt to and work effectively with clients and co-workers with different work styles and levels of technical knowledge
• Excellent verbal, written and interpersonal communication skills
• Ability to build, and manage team
• Ability to work independently given general guidance
• Demonstrated ability to succinctly summarize issues/communicate to senior business stakeholders
• Excellent verbal, written and interpersonal communication skills
• AI- First Expertise /Mindset
• Practical Application: Demonstrable, hands-on experience using and integrating AI development tools (, Devin, GitHub Copilot, Claude, Codex) into the software development lifecycle for tasks like code generation, debugging, and documentation
• Strategic Mindset: Strong understanding of the concepts underpinning modern AI tools (LLMs, prompt engineering, Retrieval-Augmented Generation – RAG, MCP, A2A) and a clear vision for how to leverage them to transform engineering productivity and quality

Education:

• Bachelor’s degree or equivalent experience
• Experience and/or knowledge of financial & banking industry is a plus
• Industry certifications such as CISSP, CCSP, and other vendor certifications are highly preferred.

------------------------------------------------------

Job Family Group:

Technology

------------------------------------------------------

Job Family:

Applications Development

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Primary Location Full Time Salary Range:

$120, - $170,

------------------------------------------------------

Most Relevant Skills

Please see the requirements listed above.

------------------------------------------------------

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

------------------------------------------------------

Automated Processing and AI

We use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi.

Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.

------------------------------------------------------

------------------------------------------------------