Company record
Who leads security at Citizens Financial Group
The most recent move CISO Tribune has on record at Citizens Financial Group was announced on February 14, 2024: too long ago to say who holds the seat today. The history below stands; the current holder is not yet confirmed.
What Citizens Financial Group tells the SEC
Its fiscal 2025 Form 10-K, filed February 12, 2026, carries an Item 1C cybersecurity disclosure that describes a Chief Security Officer, with oversight by the Risk Committee. Read the section verbatim or the filing on sec.gov. A filing describes governance as of its date, not today's seat.
Tracked by the Wire since February 14, 2024 · 1 recorded move · every claim links to a sourced record · Updated
Where Citizens Financial Group appears on the record (2)
Every page on CISO Tribune and its network that carries this company, 2 in all.
- On the Wire
- SEC filing
- Form 10-K cybersecurity disclosure, fiscal 2025 · Item 1C, filed February 12, 2026
About Citizens Financial Group
CISO Tribune's Leadership Bench files Citizens Financial Group under Financial Services and North America. The SEC classifies it under standard industrial classification 6022, State commercial banks, and EDGAR lists its ticker as CFG. The Wire has one security-leadership move at Citizens Financial Group on record, announced on February 14, 2024.
What Citizens Financial Group's 10-K says about security governance
Citizens Financial Group's fiscal 2025 Form 10-K, filed February 12, 2026, describes its cybersecurity governance in Item 1C. The lines below are that filing's own statements, each with the sentence it comes from.
Top security role, as the filing names it: Chief Security Officer.
Board oversight: the Risk Committee.
“The Risk Committee is responsible for oversight of the management of cybersecurity risk consistent with the Framework.”
How often the board or committee hears about it: annually.
“The CSP is presented by the CSO to the Risk Committee annually for approval in conjunction with an annual cybersecurity briefing.”
Frameworks and standards the filing names: NIST (publication not named).
Plain-English reading and full text of the filing · the filing on sec.gov
Security leadership timeline
Security leaders of Citizens Financial Group on our record
Brendan Goode: named Chief Security Officer, announced on February 14, 2024 record
Security chiefs at other Financial Services organizations
Other organizations CISO Tribune files under Financial Services with a named security chief on record: those in North America first, in alphabetical order from Citizens Financial Group onward.
Coinbase: Michael Sikorski, Chief Information Security Officer.
DCM Services: Curtis Rebelein, Chief Information Security Officer.
Depository Trust Clearing Corporation (DTCC): Laura Deaner, Chief Information Security Officer (CISO).
Envestnet: Rich Friedberg, Chief Information Security Officer (CISO).
EP Wealth Advisors: Kate Middagh, Chief Information Security Officer.
Equifax: Jeremy Koppen, Chief Information Security Officer (CISO).
Farmers & Merchants Bank of Long Beach: Mike Brown, Chief Information Security Officer.
Finance of America Reverse: Maury Pipkin, Chief Information Security Officer.
Questions CISOs ask about Citizens Financial Group
- Who are the security chiefs at other Financial Services organizations?
- On CISO Tribune's record they include Michael Sikorski at Coinbase, Curtis Rebelein at DCM Services, Laura Deaner at Depository Trust Clearing Corporation (DTCC) and Rich Friedberg at Envestnet.
- Which board body oversees cybersecurity at Citizens Financial Group?
- Citizens Financial Group's fiscal 2025 Form 10-K places oversight of cybersecurity risk with the Risk Committee.
Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.

CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.

CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.