Services, Client Data Safeguarding Lead - SVP

Citi Services is a leading provider of cash management, treasury, trade, clearing, depository receipts, and commercial cards services. Services has a global network spanning more than 90 countries and is unique in the industry for its reach, interoperability, and flexibility. We provide clients with dynamic information, platforms, tools, and APIs to effectively manage their portfolios, financial positions, working capital, and supply chains.

The Services Client Data Safeguarding Lead will report to the Head of Client Data Safeguarding within the Services Data Governance organization. This is a senior individual contributor and team leadership role with global scope, responsible for partnering with the Chief Information Security Office (CISO) to drive adoption and operationalization enterprise-grade Data Loss Prevention (DLP) technologies across the Services organization — including desktop DLP tools, email data loss prevention solutions, and secure document and data sharing channels. The role will work closely with Services business and operations teams to ensure that client-facing communications and data sharing activities are conducted through secure, approved channels — without creating unnecessary friction that impedes day-to-day business operations. A key differentiator for this role is the ability to balance robust data protection controls with exceptional user experience — designing preventative controls that are intuitive, frictionless, and aligned with how the business works with their clients.

Key Responsibilities

• Enterprise Technology Adoption: Partner with the CISO to evaluate, onboard, and operationalize enterprise DLP technologies across Services, including desktop data loss prevention tools, email DLP solutions, and secure file sharing platforms

• Secure Communications & Channels: Work directly with Services business and operations teams to ensure that all client-facing communications, document sharing, and data exchanges are conducted through the Services strategic platform; driving awareness and adoption of approved secure communication methods across global teams

• Frictionless Control Design: Apply expertise in user behavior and UX design principles to develop and implement preventative DLP controls that protect sensitive data while minimizing disruption to business workflows and client interactions; ensure controls are intuitive and do not impede the ability of teams to effectively serve clients

• Incident Management: Coordinate with and assist the Services Business Information Security Office Cyber Security team to govern data breach incidents within Services, ensuring timely detection, triage, escalation, remediation, and root cause analysis of DLP incidents; develop and maintain incident response playbooks and reporting frameworks

• Stakeholder Engagement & Training: Engage with Services business leads, operations teams, technology owners, and end users to build awareness of data loss risks and promote a culture of data protection; design and deliver targeted training and communications to drive behavioral changes

• Policy Operationalization: Translate enterprise DLP policies and standards into practical, actionable controls and procedures tailored to the specific workflows and client engagement models of the Services business

• Monitoring & Reporting: Develop and maintain metrics and dashboards to monitor DLP tool effectiveness, incident trends, user behavior patterns, and overall adherence to data loss prevention standards; report findings and recommendations to the Head of Data Loss Governance and senior leadership

• Continuous Improvement: Continuously assess the effectiveness of deployed DLP controls and secure communication channels; identify gaps, emerging risks, and opportunities to enhance protection while improving the user experience

• Cross-Functional Collaboration: Collaborate with the Enterprise Information Office, Information Security, Technology, Legal, Compliance, and Risk teams to ensure Services' DLP practices are aligned with enterprise standards and global regulatory requirements

• Global Governance: Ensure consistent application of Data Loss Prevention controls and secure communication standards across all geographies in which Services operate, accounting for regional regulatory requirements and operational nuances

Qualifications

• Bachelors degree, Masters preferred

• 8+ years of relevant experience in data loss prevention, information security, data governance, or a related discipline within Banking, Financial Services, or a similarly complex regulated industry

• Hands-on experience deploying and operationalizing e