Citi is looking for a Technology Risk & Application Governance Analyst to serve as a critical operational partner to Application Managers across a portfolio of enterprise and vendor-supplied applications, reducing administrative burden and ensuring teams stay ahead of governance and compliance requirements. In this role, you will bridge the gap between application development teams and the firm's technology risk and control frameworks, acting as a dedicated delegate who keeps complex lifecycle and compliance processes on track. Your work will directly enable development teams to operate efficiently while maintaining the highest standards of application governance in a large, regulated financial environment.
Responsibilities
- Manage the full administrative lifecycle of applications across a portfolio, coordinating onboarding, inter-departmental transfers, and infrastructure capacity requests within governance and IT Service Management platforms to ensure accurate, up-to-date records in the central Application Portfolio Management system.
- Facilitate the execution of technology risk and control assessments by liaising between development teams, Application Managers, and control groups such as Information Security and Enterprise Architecture, ensuring submissions, approvals, and architecture sign-offs are completed on schedule.
- Serve as the primary administrative point of contact between internal technical teams and external software vendors, coordinating third-party risk assessments with Information Security, Procurement, and Legal teams, and maintaining clear documentation of vendor contracts, support procedures, and key contacts.
- Coordinate Application Vulnerability Assessments and penetration testing activities, tracking the remediation of identified findings using security tooling and supporting the maintenance of the application's Software Bill of Materials to keep all third-party components licensed, secure, and compliant.
- Build and maintain structured knowledge maps covering key stakeholders, processes, and contacts across specific applications and business lines, creating reusable knowledge bases that drive consistency and efficiency across compliance and administrative workflows.
- Identify and implement automation opportunities for repetitive tasks such as audit evidence collection and status report generation, reducing manual effort and improving the speed and accuracy of compliance activities.
- Produce and distribute clear status reports for Application Managers and stakeholders, keeping all parties informed of compliance progress, emerging risks, and upcoming deadlines across the application portfolio.
Required Qualifications & Skills
- At least 2 years of IT experience overall, with a minimum of 3 years in an Application Development, Production Support, or DevOps environment, demonstrating hands-on familiarity with how applications are built, maintained, and governed.
- Proven ability to navigate large, complex enterprise environments with formal risk and control processes, managing multiple competing priorities and adjusting quickly to shifting demands.
- Fluency in Jira or an equivalent agile tracking tool, used to coordinate, track, and report on tasks across multiple teams and workstreams.
- Intermediate to expert-level proficiency in Microsoft Excel, applied to data analysis, compliance tracking, and stakeholder reporting.
- Solid grasp of the end-to-end Software Development Lifecycle and modern DevOps and DevSecOps principles, enabling effective collaboration with engineering and security teams.
- Exceptional organisational skills with the ability to plan, manage, and deliver across a high-volume workload while maintaining accuracy and meeting compliance deadlines.
- Clear and confident communication skills, with demonstrated experience coordinating across a broad range of stakeholders from technical developers to senior management.
Beneficial Skills & Qualifications
- Experience supporting the management of vendor-supplied applications, including coordinating with third-party support teams and internal risk assessment functions.
- Familiarity with DevSecOps toolchains such as Blackduck, Snyk, or Checkmarx, particularly in the context of vulnerability management and software composition analysis.
- Working knowledge of IT Service Management platforms such as ServiceNow, or experience with low-code automation tools used to streamline operational and compliance workflows.
- Foundational understanding of ITIL concepts and how they apply to service management and application support in an enterprise context.
- Background in Capital Markets or a similarly regulated financial services environment, bringing familiarity with the governance standards and risk expectations of a major financial institution.
What We Offer
Joining Citi means becoming part of a global organisation where your contributions directly shape how technology risk and governance are managed at scale. This role offers meaningful ownership, consistent collaboration with senior stakeholders, and real opportunities to grow your expertise across application management, security compliance, and process improvement.
- A hybrid working model with 3 days in the office and 2 days working remotely, giving you flexibility while staying connected to your team.
- Access to learning and development programmes that support your continued growth in technology governance, risk management, and enterprise operations.
- Exposure to a broad portfolio of applications and business lines within a leading global financial institution, accelerating your professional development.
- Wellbeing support and work-life balance initiatives designed to help you perform at your best inside and outside of work.
- A performance-driven environment where collaboration, initiative, and delivery are recognised and rewarded.
- Competitive financial benefits and compensation, reflective of your skills and contributions.
Apply today and take ownership of a role where your operational precision and governance expertise will have a measurable impact across Citi's technology organisation.
Job Family Group
Technology
Job Family
Technology Product Management
Time Type
Full time
Primary Location Full Time Salary Range
$94,300.00 - $141,500.00
Most Relevant Skills
Please see the requirements listed above.
Other Relevant Skills
For complementary skills, please see above and/or contact the recruiter.
Automated Processing and AI
We use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi.
Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.
This job opening is for an existing job vacancy.
Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.
If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi. View Citi’s EEO Policy Statement and the Know Your Rights poster.