Head of the Global Fraud Fusion Center, MD, C16
- Company: Citigroup
- Location: Jacksonville Florida United States
- Work mode: On-site
- Job type: Full-Time
- Posted: 2026-10-26
The Head of the Global Fraud Fusion Center is an executive leadership role responsible for directing Citi’s enterprise proactive fraud intelligence, macro-detection, and adversarial threat simulation capabilities. Operating within the 1st Line of Defense, this executive will drive threat assessment and rapid containment across all global lines of business by uniting Cyber, Fraud, and Anti-Money Laundering (AML) intelligence into an integrated, actionable defense framework.
This senior leader will oversee three foundational operational pillars:
* Fraud Fusion Center Core Operations & Intelligence: Proactive detection and alerting, OSINT/cyber intelligence gathering, and dark web monitoring to safeguard product fraud, merchant operations, and rewards integrity.
* Fraud Vulnerability Testing & Ecosystem Orchestration: Cross-functional coordination across internal Data & Analytics, Technology, Cyber Security Operations (CISO/SOC), and external AI Frontier Model research partners.
* Fraud Red Team & Adversarial Simulation: Offensive threat testing, red teaming, and control validation across customer journeys and digital products.
The Head of the Global Fraud Fusion Center represents Citi with international law enforcement agencies, regulatory bodies, and industry alliances, positioning Citi at the leading edge of fraud defense and AI-driven security innovation.
KEY RESPONSIBILITIES
1. STRATEGIC LEADERSHIP & FUSION OPERATIONS OVERSIGHT
* Provide executive leadership and operational governance over Core Fusion Operations (Detection & Alerting, OSINT, Product Fraud, and Merchant & Rewards Integrity) and the Fraud Red Team.
* Champion an agile, accountable, and high-performance culture across a globally distributed, multi-disciplinary organization of fraud analysts, cyber intelligence specialists, data scientists, and offensive testers.
* Break down organizational silos across business units, technology teams, CISO/SOC, Compliance, and 2nd/3rd Lines of Defense to enable rapid threat sharing and operational alignment.
2. CONVERGENCE, INTELLIGENCE INTEGRATION & EMERGING THREATS
* Lead the end-to-end integration of Cyber, Fraud, and AML threat intelligence to proactively uncover organized crime networks, dark web exposures, account takeovers, and multi-vector financial crime schemes.
* Continuously monitor the evolving criminal landscape to anticipate next-generation fraud vectors—including Generative AI, synthetic media/deepfakes, automated bot networks, and synthetic identity fraud—before they materialize at scale.
* Translate emerging external trends and tactical threat intelligence into strategic enterprise investment priorities, policy adjustments, and proactive defensive measures.
3. RED TEAM, ADVERSARIAL SIMULATION & VULNERABILITY TESTING
* Direct the buildout, scaling, and continuous operation of Citi’s dedicated Fraud Red Team.
* Conduct continuous offensive simulations, stress tests, and scenario-based attacks across digital banking platforms, customer onboarding journeys, and modern payment ecosystems to uncover hidden systemic vulnerabilities and harden internal controls.
* Oversee fraud vulnerability testing by managing deep technical collaborations between internal Fraud Data & Analytics, Cyber engineering, Technology, and frontier AI research partners.
4. AI & ADVANCED ANALYTICS STRATEGY
* Define and execute the Fusion Center’s technology roadmap, addressing the dual nature of AI as both an accelerant of criminal tradecraft and an enterprise force multiplier for proactive fraud defense.
* Partner with Enterprise Technology, Data Science, Cyber, and Risk teams to deploy advanced machine learning models, telemetry tools, graph/network linkage analytics, and behavioral biometrics across intelligence, real-time detection, investigations, and automated response workflows.
* Drive enterprise-wide macro anomaly detection to convert high-volume telemetry and transaction data into rapid containment actions and measurable loss avoidance.
5. INDUSTRY ALLIANCES, LAW ENFORCEMENT & EXTERNAL ENGAGEMENT
* Serve as Citi’s principal ambassador across the global fraud intelligence ecosystem, establishing strategic partnerships with federal and international law enforcement bodies (e.g., FBI, Secret Service, Europol, Interpol).
* Actively participate in intelligence alliances (e.g., NCFTA) and industry consortia, driving adoption and standardization of frameworks such as MITRE Fight Fraud (F3)™.
6. GOVERNANCE, EXECUTIVE COMMUNICATION & PERFORMANCE METRICS
* Establish and track executive-grade Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) measuring Fusion Center efficacy, including speed-to-detection, mean time to containment (MTTC), control improvement velocity, and direct/indirect loss avoidance.
* Deliver clear, high-impact briefings, strategic threat assessments, and performance dashboards to Executive Committees, the Board of Directors, and global regulatory supervisors.
* Balance risk management decisively with customer experience, ensuring robust defense mechanisms preserve friction-free client journeys.
REQUIRED QUALIFICATIONS
* Experience: 15+ years of progressive leadership experience in fraud risk management, cyber-fraud intelligence, financial crimes prevention, or security operations within global financial institutions, top-tier fintechs, or relevant intelligence/defense/government agencies.
* People Leadership: 15+ years of demonstrated success leading, mentoring, and scaling large, multi-disciplinary, and globally distributed technical teams.
* Threat & Domain Expertise: Deep mastery of cyber-fraud convergence, organized financial crime tradecraft, red teaming/adversarial testing, and enterprise digital payment systems.
* AI & Emerging Technologies: Strong, practical working knowledge of modern AI/ML technologies (including Generative AI, LLMs, automated agentic workflows, and synthetic media) and their application in fraud prevention, threat intelligence, and detection.
* Data & Telemetry Acumen: Working knowledge of advanced anomaly detection platforms, graph/linkage analytics, customer behavioral profiling, and cloud-scale telemetry tools.
* Stakeholder Management: Proven track record of briefing and advising executive committees, board members, regulatory authorities, and international law enforcement agencies.
* Communication & Execution: Exceptional communication, executive negotiation, crisis management, and cross-functional execution capabilities.
* Education: Bachelor’s degree from an accredited university (or equivalent global credential); extensive executive management experience required.
PREFERRED QUALIFICATIONS
* Advanced Education: Master’s degree in Cybersecurity, Computer Science, Data Science, Information Systems, Criminal Justice, Financial Crime Risk Management, or Master of Business Administration (MBA).
* Professional Certifications: Relevant industry credentials, such as:
* Certified Fraud Examiner (CFE)
* Certified Information Systems Security Professional (CISSP)
* Certified Anti-Money Laundering Specialist (CAMS)
* Certified Threat Intelligence Analyst (CTIA) / GIAC Cyber Threat Intelligence (GCTI)
* Framework Experience: Practical experience implementing and operationalizing the MITRE Fight Fraud (F3)™ or MITRE ATT&CK® frameworks within large-scale enterprises.
* Public-Private Partnerships: Prior leadership experience within public-private information sharing bodies (e.g., NCFTA, FS-ISAC, Europol Financial Crimes Centre).
CORE COMPETENCIES & LEADERSHIP ATTRIBUTES
* Executive Presence & Influence: Ability to articulate a compelling strategic vision, build consensus across highly matrixed global stakeholders, and drive transformative change.
* Adversarial & Investigative Mindset: Instinctive grasp of threat actor psychology, attack vectors, and systemic vulnerabilities, enabling proactive defense before exploitation occurs.
* Future-Focused & Intellectuall