The Eirene Enterprise Technical Change Champion is a senior technology leader dedicated to driving enterprise-wide execution and operational acceleration for software vulnerability remediation. This role focuses on enabling hundreds of global software development teams to rapidly resolve static code vulnerabilities (SAST/source code defects), patch vulnerable software dependencies/libraries (SCA/third-party packages), and modernize their delivery capabilities - including containerization and streamlined release processes - to achieve same-day fix and deployment capabilities.
As the principal technical change agent, the Director partners directly with software engineering teams, specialized remediation contractors, and internal tooling teams. The primary objective is to remove engineering friction, validate and stress-test technical remediation plans, accelerate tool adoption, and build sustainable pathways for same-day production patching.
Key Responsibilities & Core Duties
1. Technical Change Leadership & Same-Day Release Acceleration
- Lead the enterprise change agenda to dramatically compress remediation cycle times, championing technical practices, containerization, and modern workflows that empower teams to deploy hotfixes and patches on the same day vulnerabilities are identified.
- Act as the senior technical champion across business lines, partnering with engineering leads to transform patching from a disruptive, multi-week release cycle into a routine, low-risk, rapid-release operation.
- Overcome cultural, procedural, and technical blockers to rapid releases through hands-on engagement, technical demonstrations, and targeted process re-engineering.
2. Application Team Plan Validation & Technical Enablement
- Engage directly with application engineering leads and architects to review, challenge, and validate remediation plans for static code vulnerabilities (SAST) and software component/dependency patching (SCA, OS packages, runtime frameworks).
- Assess application readiness for rapid patching, helping teams decouple monolithic dependencies, transition workloads into containerized runtimes (e.g., Docker/Kubernetes/OpenShift), and establish modular architectures that isolate patch impact.
- Provide pragmatic technical guidance on complex remediation challenges, such as breaking API changes in patched libraries, framework upgrades, code refactoring for security findings, and container base-image updates.
3. Contractor & Specialist Workforce Management
- Direct and oversee specialized external contractor pools, staff augmentation teams, and vendor engineering squads embedded across application teams to accelerate hands-on code remediation and patching.
- Establish clear technical performance standards, Statements of Work (SOWs), and delivery metrics for contractor engagements focused on static code fixes and library upgrades.
- Ensure contractor outputs adhere to enterprise code quality and testing standards, facilitating smooth knowledge transfer and self-sufficiency for permanent application teams.
4. Internal Tooling & Process Optimization
- Partner closely with internal tools, CI/CD, and developer infrastructure teams to ensure scanning, build, packaging, and testing tools support rapid, friction-free developer workflows.
- Drive enterprise-wide adoption of developer-centric tools that provide automated remediation guidance, IDE-level static analysis, automated pull-request/dependency bump bots, and vulnerability tracking portals.
- Collaborate with platform teams to streamline change approvals, automated regression testing gates, and release mechanics for hotfixes to eliminate unnecessary procedural delays.
5. Program Governance, Velocity Tracking & Executive Reporting
- Define and track key technical performance metrics, specifically Mean Time to Remediate (MTTR), Same-Day Fix Ratio, Static Code Defect Resolution Rates, and Dependency Patch Dwell Time.
- Provide executive-level visibility into remediation velocity, platform containerization progress, contractor efficiency, and systemic technical bottlenecks across business units.
- Serve as the senior escalation point for engineering teams requiring tooling enhancements, infrastructure support, or governance exceptions to expedite emergency and scheduled patches.
Required Qualifications & Experience
Education & Experience Requirements
- Bachelor’s Degree in Computer Science, Software Engineering, Information Technology, or related discipline (Master’s degree preferred).
- 15+ years of progressive experience in software engineering, application architecture, or enterprise software delivery.
- 5+ years in a Director or Senior Technical Leadership role driving large-scale software delivery transformation, technical debt remediation, or software modernization across enterprise application portfolios (hundreds of distributed systems).
- Deep hands-on background in software development and architectural design, with direct experience remediating static code defects and performing complex framework/dependency upgrades.
- Proven track record of managing external technical contractor workforces and driving measurable vendor delivery outcomes.
Technical & Domain Proficiencies
- Static Code Analysis & Remediation: Deep understanding of static application security testing (SAST) findings, source-level security defects (e.g., input validation, cryptographic weaknesses, injection flaws, insecure deserialization), and code refactoring techniques.
- Software Patching & Dependency Management: Comprehensive experience with Software Composition Analysis (SCA), third-party library lifecycle management, build tools (Maven, Gradle, npm, NuGet, pip), and package managers.
- Containerization & Modern Runtime Architecture: Hands-on experience containerizing legacy and modern workloads (Docker, OCI, Kubernetes, OpenShift, Helm) to achieve immutable infrastructure, rapid image patching, and zero-downtime rollouts.
- Rapid Release Mechanisms: Proven expertise designing fast-track release pipelines, automated integration testing strategies, and canary/blue-green deployment patterns enabling same-day production deployments.
- Developer Tooling Ecosystem: Strong familiarity with static analysis and scanning platforms (e.g., SonarQube, Checkmarx, Snyk, Veracode, Black Duck, JFrog Xray, Dependabot) and enterprise build/release toolchains.
Leadership Competencies & Behavioral Attributes
Engineering Credibility - Possesses deep technical and architectural depth to earn trust and effectively advise senior software architects and lead developers.
Change Facilitation & Empathy - Understands developer pain points; actively removes tooling and process friction rather than imposing administrative burden.
Collaborative Influence - Able to mobilize and align distributed engineering teams, contractors, and internal platform teams without formal direct-line authority.
Operational Execution - Relentlessly focused on tangible outcomes - measuring success through resolved vulnerabilities, faster release velocity, and same-day deployment capabilities.
Executive Communication - Skilled at distilling complex technical bottlenecks and progress metrics into clear, actionable updates for C-level and senior technology stakeholders.
Key Performance Indicators (Success Metrics)
- Same-Day Release Capability: Percentage of application teams enabled and equipped with containerized pipelines and processes to release tested vulnerability fixes within 24 hours of notification.
- Static Code Remediation Velocity: Significant reduction in open static code defects (SAST) and average days required to refactor and remediate identified code weaknesses.
- Software Patching Cycle Time (MTTR): Measurable decrease in the dwell time of vulnerable third-party libraries and runtime dependencies across all application tiers.
- Remediation Plan Feasibility & Adherence: Percentage of application teams with validated, achievable technical roadmaps actively meeting their remediation milestones.
- Contractor Output & ROI: Delivery speed, code quality, and defect closure rate achieved by external contractor squads.
------------------------------------------------------
Job Family Group:
Technology
------------------------------------------------------
Job Family:
Applications Development
------------------------------------------------------
Time Type:
Full time
------------------------------------------------------
Primary Location Full Time Salary Range:
$160,000.00 - $350,000.00
------------------------------------------------------
Most Relevant Skills
Please see the requirements listed above.
------------------------------------------------------
Other Relevant Skills
For complementary skills, please see above and/or contact the recruiter.
------------------------------------------------------
Automated Processing and AI
We use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi.
Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.
------------------------------------------------------
This job opening is for an existing job vacancy.
------------------------------------------------------
Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.
If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.
View Citi’s EEO Policy Statement and the Know Your Rights poster.
