
Cookie Notice
Reissue: July 25, 2025
Version: 2.1
This Citi Careers Cookie Privacy Notice applies to information gathered from visitors and users of Citi Jobs and Careers at https://jobs.citi.com, https://citi.eightfold.ai/careers or https://citi.wd5.myworkdayjobs.com/en-US/2/userHome (‘our Websites’). It describes what information is gathered from your device through cookies or online tracking technologies, when you visit our Websites and interact with our Internet content, and how we collect, use and share that information. This Cookie Notice complements, and does not replace Citi privacy statements, notices or policies. This Cookie Notice should be read in conjunction with the Careers Privacy Notice for Job Applicants, including Jurisdictional Considerations (Supplements), which contain additional local/regional privacy provisions for jobs located in specific territories.
Our Websites are managed and operated by Citibank. N.A. located at 388 Greenwich St, New York, NY 10013, United States, acting as an independent business and data controller of its US operations, and as a service provider or data processor for recruitment functions of Citi subsidiaries and affiliates throughout the world.
Your privacy is our priority. Our goal is to maintain your trust and confidence when processing personal information gathered from your device. Citi will not disclose, commercialize or provide any information gathered from your device through cookies or trackers or your usage of our services to third parties for any purpose without your consent, or as stated in this Cookie Notice.
You have choices. As a visitor or user, you can make choices about which cookies and trackers that your device may download, or you sign up to a Citi service or fill an Internet request or contact form.
Cookies and Trackers are small, randomly encoded text files or pixels that a Website stores on your device and can retrieve from your browser. Our cookies or trackers can be deployed by Citi (‘own’ cookies) or by Citi’s IT service providers or selected marketing partners (‘external’ or ‘third party’ cookies). Where non-essential, you have the option to turn them on or off.
Categories and Purposes of Cookies
Our Websites may deploy several types of cookies for different purposes:
-
Strictly necessary cookies allow our services to operate in a secure and reliable manner and are essential for website operation, navigation and network management. They include basic functions like remember cookie opt-in or out selections and allow text and images to load correctly on your device. Strictly Necessary Cookies cannot be disabled, and your internet browser will accept them by default. You can set your browser memory to delete them after each online session or at any time thereafter.
-
Functional cookies are optional and enable the website to provide enhanced functionalities and personalization, such as language settings, region preferences, and to remember searches and job search parameters. These cookies are set by Citi.
-
Analytics Cookies. These cookies are optional and analyze and evaluate usage of the sites so that Citi can measure and improve performance and content, collecting and reporting de-personalized visitor data. Only data that has been depersonalized and aggregated, or anonymized, so that it is no longer personal data, may be used by our service providers for their own purposes.
-
Marketing and cross-contextual behavioural advertisement cookies these cookies are also optional and are used to understand visitor interests, track how they navigate the site and provide data for advertising purposes, including targeted advertising based on the device’s navigation across sites, and serve content that we publish in search engines or social media channels. These can be set by Citi and shared with selected partners.
External Cookies from Service Providers and Selected Partners
For Analytics or Statistical Purposes:
Citi has engaged service providers to improve services and messaging, offer interactive content, improve usability, and allow users to share news or products. These cookies, even if issued by external suppliers, report user information to Citi, and use only aggregated statistical data for their own purposes.
For Marketing and Behavioral Advertising Purposes:
Advertising platforms such as Google Marketing®, Google AdSense, Google AdWords, DoubleClick and Customer Match data; and user trackers from social media channels such as Facebook, Instagram LinkedIn, X and YouTube, help us deliver multimedia content which may be relevant to visitors through their interactions with our sites, and track responses to advertising to measure the effectiveness of Citi’s online campaigns. Information captured typically includes web requests, session ID, browser types, browser languages and/or the date and time of visitor interaction with Ads.
Foreign Signals Intelligence:
Google Analytics, the Google Marketing Platform and YouTube are brands of Google, Inc., X is a brand of X Corp. (formerly Twitter, Inc.), and Facebook and Instagram are brands of Meta Inc. All are U.S. electronic communications services providers subject to the CLOUD Act (18 USC § 2523), the Foreign Intelligence Surveillance Act (50 USC 36 §1801) and Executive Order 12333 (each as restated and amended). These statutes allow federal law enforcement and intelligence agencies, under strict conditions, to request from service providers and partners, the browsing and technical data of foreign individuals where their data is transferred to, or accessed from, the United States.
You may use our cookie preferences tool or adjust your browser settings to decline or deactivate Functional, Analytics, Marketing or Cross-Contextual Behavioral Advertising cookies. You may also use the online tools described below to select cookies and trackers individually.
Your Choices
Cookie Preference Centre:
Our websites provide enhanced cookie preferences, where you may consent for each category of cookie, other than strictly necessary cookies. Please note that not all websites have cookies from all categories. If you change your cookie settings, your new preferences will go into effect immediately.
Alternatively, the following options are also available:
Deactivating Cookies and Trackers on Your Internet Browser:
-
A) Analytics Cookies: You can opt out of Google Analytics using its opt-out tool.
-
B) Marketing and Behavioral Advertising Cookies: You may manage and disable marketing and behavioral advertisement cookies through your Internet browser settings. Information on how to change the settings in your Internet browser, to accept or decline cookies in your computer (desktop or laptop) can be found on:
Information on how to change cookie settings in your mobile device (phone or tablet), can be found on:
Activating and Deactivating Cookies Individually Via Consumer Choice Web Tools:
Cookies used for Marketing and Advertisement purposes can be managed (deactivated) individually via consumer choice tools. Please visit www.youronlinechoices.com and https://optout.aboutads.info.
California Residents:
If you are a resident of the State of California and wish to exercise any rights under the California Privacy Rights Act (CPRA), you can submit a verifiable consumer request to us by either calling +1 833-971-1191 (TTY: 711) or visiting our California Privacy Hub.
Data Storage and Duration
Cookies and online trackers and device preferences are stored in your Internet browser’s cache memory. Citi does not make or store copies in its own systems, or those of its partners or service providers. Most essential or necessary cookies expire automatically at the end of your visit (these are “session cookies”). Optional cookies may have a longer duration (“persistent cookies”). Our websites will send you a request to refresh (re-select) cookies and trackers at least once a year upon each anniversary from when you last made cookie and tracker choices.
Cookie Disclosure
You can view detailed information regarding each individual site cookie, its purpose, and its duration in the table below.
citi.eightfold.ai/careers
Name | Purpose | Description | Category | Expires |
---|---|---|---|---|
_vs |
Cookie Attributes |
Identifies the user as a ‘not yet authenticated’ (User not signed into Eightfold). It is essential to protect Eightfold ‘s infrastructure from bots or malicious actors. This cookie does not provide access to authenticated pages. |
Strictly necessary |
1 year |
_vscid |
Load Balancing Cookie |
Used for load balancing, content delivery, and application responsiveness. This cookie does not provide access to authenticated pages |
Strictly necessary |
1 year |
_vsa | Authenticated User |
Identifies User as ‘authenticated account holder’ (currently signed on to Eightfold) This cookie contains a timestamp when the user authenticated and is used to invalidate a session if needed. This cookie does not provide access to authenticated pages. |
Strictly necessary |
1 year |
session |
Authenticated User |
Helps users access content that requires authentication. Usage: Each time the browser requests a web page from the server, it includes the session cookie with its request to verify. |
Strictly necessary |
End of Session A session ends upon browser closing, password change or account being disabled. Cookie is SameSite restricted. |
Remember_me |
Authenticated User |
Helps users access content that requires authentication. Usage: Each time the browser requests a webpage from the server, it includes the remember_me cookie to generate a session cookie, if missing. |
Strictly necessary | 1 year The Remember me cookie is also invalidated upon password change or account being disabled. Cookie is SameSite restricted. |
jobs.citi.com
Name | Purpose | Category | Encrypted | Expires |
---|---|---|---|---|
Ak_bmsc |
Akamai (CDN) to detect and limit malicious bot traffic |
Strictly necessary |
Yes |
End of session |
Bm_sv |
Akamai (CDN) to detect and limit malicious bot traffic |
Strictly necessary |
Yes |
End of session |
DefaultAsserted |
When OneTrust or Digital Control Room are enabled, informs the site not to set a cookie on the first page load. |
Strictly necessary |
No |
End of session |
PersonalizedCookie |
Used to display relevant content on the site based on the user's last interaction. |
Functional |
Yes |
30 days |
savedViewedJobs |
Used on Recently View Job modules to display saved job links. |
Functional |
No |
30 days |
searchFormCookie |
Used for storing the user's last location they have selected to search. |
Functional |
No |
30 days |
searchQueryCookie |
Used for the autocomplete module to display recently searched options. |
Functional |
No |
30 days |
viewedJobs |
Used on Recently Viewed Job modules to display recently viewed job links. |
Functional |
Yes |
30 days |
apstr |
Saves the ATS source code from the referring URL so that it can be passed into the ATS when the user applies. |
Analytics |
Yes |
End of session |
SearchSessionId |
Used by search analytics to associate events with search-related user interactions. |
Analytics |
No |
End of session |
SearchVisitorId |
Used to identify a visitor for search analytics and CRM and to associate events with search related interactions. |
Analytics |
No |
1 year |
sp |
Used for remarketing, optimization, attribution, and referral for programmatic job advertising. |
Marketing |
No |
2 years |
OAuth_LinkedIn |
LinkedIn OAuth value for login. Used for LinkedIn Job Matching. |
Functional |
Yes |
End of session |
_xs |
LinkedIn User ID. Used for LinkedIn Job Matching. |
Functional |
Yes |
End of session |
_ga |
Google Analytics cookie used to distinguish users and measure interactions with site content. |
Analytics |
Yes |
Up to 2 years |
_gcl_au |
Google Adsense cookie used for targeting or remarketing. |
Analytics |
Yes |
Up to 2 years |
DSID |
Google cookie used for remarketing, optimization, attribution, and referral for programmatic display advertising. |
Marketing |
Yes |
90 days |
IDE |
Google cookie used for remarketing, optimization, attribution, and referral for programmatic display advertising. |
Marketing |
Yes |
90 days |
Google Global site Tag (gtag.js) |
Google cookie used for optimization and attribution for paid search advertising. |
Marketing |
No |
30 days |
Microsoft Ads (Bing) UET Tag |
Microsoft Ads (Bing) cookie used for optimization and attribution for paid search advertising. |
Marketing |
No |
30 days |
LinkedIn Insight Tag |
LinkedIn cookie used for optimization and attribution for LinkedIn advertising. |
Marketing |
No |
30 days |
Twitter Pixel |
Twitter cookie used for optimization and attribution for Twitter advertising. |
Marketing |
No |
30 days |
Workday
Security Management
Cookie Subgroup | Cookies | Description | Cookies Type | Cookie Duration |
---|---|---|---|---|
Session experience |
PLAY_LANG, PLAY_SESSION, timezoneOffset, wd-browser-id |
Session experience user, device, and session ID cookies along with timestamp cookies for timing out sessions after inactivity. These cookies expire at the end of the session. |
First party |
Session |
Security Management |
TS* |
Security Management - Helps prevent cyber attacks on the user’s interactions with the enterprise cloud applications. Verifies that the domain and subdomain cookies sent between the web server and the client aren’t altered. |
First party |
Session |
Security Management |
CALYPSO_CSRF_TOKEN |
Security Management - Contains a CSRF token to prevent cross-site request forgery attacks, that is, to prevent a user from carrying out unintended operations on the career site |
First party |
Session |
Security Management | __cf_bm | Security Management - To identify and mitigate automated traffic to protect the Platform from malicious bots | First party | After 30 mins of inactivity |
Load balancing |
Naming convention of WorkdayLB_* WorkdayLB_UICLIENT, WorkdayLB_SAS |
Load balancing - to forward requests for a single session to the same server for consistency of service. | First party | Session |
Marketing |
sp |
Used for remarketing, optimization, attribution and referral for programmatic job advertising | Programmatic jobs | 2 years |
Marketing |
DSID |
Google cookie used for remarketing, optimization, attribution and referral for advertising | Radancy Metrics | 90 days |
The following cookies are used when the associated optional features described above are enabled:
Cookie Subgroup | Cookies | Description | Cookies Type | Cookie Duration |
---|---|---|---|---|
Cookie Preference | enablePrivacyTracking | Boolean tracker to capture user preference for non-essential cookies from External Career Site Cookie Banner | First party | Session |
Performance (Analytics) | Google Analytics: _ga* | Analytics - to deliver Google Analytics data to as your nominated Tracking ID for External Site traffic metrics | First party | 400 - 730 days |
Functional (Apply with LinkedIn) |
|
Apply with LinkedIn feature. For details connect with LinkedIn. See Apply with LinkedIn reference materials. | Third party |
Session (JSESSIONID, lang) 2 years the rest |
Explore More Jobs
-
Wholesale Loans Collateral Senior Lead Analyst (Senior Vice President)
- Tampa, Florida, Getzville, New York
-
Wholesale Loans Collateral Lead Analyst (Vice President)
- Getzville, New York, Tampa, Florida, Irving, Texas
-
Wholesale Credit Risk Business Analyst, AVP
- Belfast, Northern Ireland
-
WCR In-Business Quality Assurance – Global Corporates – VP
- Mumbai, Maharashtra
-
Early Careers Talent Network
Sign up to receive personalized job matches based on your skills and interests. We'll help you discover opportunities that align with your goals.
-
Career Professionals Talent Network
Sign up to receive tailored job matches based on your skills and experience. Discover opportunities that align with your ambitions.