Head of Infrastructure, Application Security

Overview

Head of Infrastructure & Application Security

Location : Iselin, NJ (Preferred); Johnston, RI; Westwood, MA; Boston, MA; Phoenix, AZ; Plano, TX; Columbus, OH

Department : Information Security

Reports To : Chief Information Security Officer (CISO)

About the Role

Citizens Bank is seeking an experienced and visionary Head of Infrastructure & Application Security to lead and expand our security strategy across cloud, network, endpoint, and application environments. This senior leader will play a critical role in ensuring the confidentiality, integrity, and availability of the bank’s systems and data.

The ideal candidate is a strategic thinker and hands-on leader with deep technical expertise in infrastructure and application security, experience in highly regulated industries, and the ability to influence across business and technology teams.

Key Responsibilities

• Leadership & Strategy : Define and execute a comprehensive security strategy covering infrastructure, applications, and vulnerability management aligned to business and regulatory requirements.
• Leadership & Strategy : Build and lead a high-performing team of cloud, network, endpoint, and application security professionals.
• Leadership & Strategy : Partner with enterprise architecture, IT, and operations leaders to embed security into all technology initiatives.
• Cloud Security : Oversee the design and implementation of secure cloud infrastructure across public, private, and hybrid environments.
• Cloud Security : Ensure compliance with security frameworks, regulatory expectations, and industry best practices (e.g., NIST, FFIEC, ISO).
• Cloud Security : Lead cloud security posture management and threat detection programs.
• Network Security : Manage and enhance network security architecture, including firewalls, IDS / IPS, and segmentation.
• Network Security : Oversee secure connectivity across internal, external, and third-party environments.
• Network Security : Drive resiliency and monitoring to prevent and detect advanced threats.
• Endpoint Security : Lead the strategy for securing laptops, mobile devices, and virtual desktop environments.
• Endpoint Security : Implement endpoint detection and response (EDR), mobile device management (MDM), and zero-trust access principles.
• Endpoint Security : Ensure a frictionless but secure end-user experience.
• Application Security : Establish and oversee secure software development lifecycle (SDLC) practices.
• Application Security : Implement application security testing (SAST, DAST, IAST) and code review processes.
• Application Security : Partner with development teams to integrate security into DevOps and CI / CD pipelines.
• Vulnerability Management : Develop and lead an enterprise vulnerability management program across infrastructure and applications.
• Vulnerability Management : Ensure timely identification, prioritization, and remediation of vulnerabilities.
• Vulnerability Management : Provide executive-level reporting on vulnerability posture and risk reduction progress.
• Governance & Risk Management : Establish policies, standards, and metrics to measure security posture.
• Governance & Risk Management : Partner with Risk, Audit, and Compliance to ensure continuous alignment with regulatory obligations.
• Governance & Risk Management : Provide regular updates and metrics to the CISO, senior executives, and board committees.

Qualifications & Experience

Education

Pay & Benefits

Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance.

Equal Employment Opportunity

Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, medical condition, military or veteran status, national origin, pregnancy / childbirth / lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and / or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.

Why Work for Us

At Citizens, you\'ll find a customer-centric culture built around helping our customers and giving back to our local communities. When you join our team, you are part of a supportive and collaborative workforce, with access to training and tools to accelerate your potential and maximize your career growth

Background Check

Any offer of employment is conditioned upon the candidate successfully passing a background check, which may include initial credit, motor vehicle record, public record, prior employment verification, and criminal background checks. Results of the background check are individually reviewed based upon legal requirements imposed by our regulators and with consideration of the nature and gravity of the background history and the job offered. Any offer of employment will include further information.

11 / 28 / 2025

#J-18808-Ljbffr