External Penetration Testing - Vendor Lead (Vice President)

Senior information security professional who serves as the central liaison between Citi stakeholders and external penetration testing vendors, ensuring smooth execution of testing engagements and vendor adherence to Citi processes. Responsible for managing the Vulnerability Disclosure program (including onboarding, triage, retesting and public/private bug bounty coordination) and analyzing vulnerability trends to improve security hygiene. The role ensures alignment of information security activities with Citi's data security policy and drives operational quality and risk decisions across testing activities.