Third Party Resilience Execution Function Group Manager - C16 - BUDAPEST

Background:

Operational Risk Management (ORM) is an enterprise level independent risk management function responsible for enterprise-wide oversight and aggregation of operational risk. Its mandate covers all business lines (USPB, Markets, Services, Wealth, Banking, International, Global Functions, Operations & Technology) spanning all geographies.

The ORM function oversees the design and implementation of the non-financial risk management framework. Key objectives of the risk management framework are:

Operating model, staffing and culture: Ensure the operating model across lines of defense is clear and consistent with sufficient resources, expertise, accountability and stature, and that it is enabled by structured training and awareness program to effectively manage and oversee operational risk.

Operational risk appetite: Clearly articulate risk definitions and appetite and make sure they are aligned against the most critical business outcomes to ensure strategic relevance and application at business, country and entity levels and that Citi operates within its set risk appetite.

Control objectives and standards: Ensure Enterprise Control Standard and controls design requirements are clearly articulated & implemented, and that control objectives and requirements are defined at appropriate risk category and sub-category levels to ensure consistent control design and effectiveness. Operational risk and control assessments and reporting: Oversee that MCA is fit for purpose and is owned with full buy-in from the 1st line, and that it is supplemented by a suite of other fit-for-purpose assessments (e.g., risk category specific assessments, scenario analysis, and lessons learned). Ensure assessment results are communicated through clear reporting with thematic and actionable insights.

Strategic decision making: Oversee that Risk Management practices; insights and tools are consistently embedded in day-to-day business processes and strategic decision-making to enable proactive issue identification and comprehensive remediation.

The Third-Party Risk Program Lead will face off with 1st line enterprise roles and will be working closely across all ORM teams in dispensing their key risk oversight responsibilities to ensure well- coordinated risk assessments, risk identification, measurement/monitoring and timely remediation of key gaps including appropriate enterprise-level aggregation.

Key Responsibilities

Lead a team of 20+ FTE in the comprehensive oversight of Third-Party Risk. Define the Operational Risk Framework for Third Party Risk Category (External Vendors, Inter Affiliate Relationships, Business Managed Control Frameworks & International Program) in sync with Global Operational Risk Policy. Oversee Risk Category Appetite and associated metrics, with input from Business Global Operational Risk Officers. Manage the Ops Risk Appetite for the risk category. In case of Risk Appetite potential and/or actual breaches, ensure risk exposure is well understood and there is a robust Path to Green to avert/remediate breach within an acceptable time frame. Provide leadership and direction of independent second line risk assessments (e.g., reviewing control design and effectiveness of key processes, end to end reviews of significant control breaks that impact multiple risk categories, lessons learned and near misses) and root cause assessments (e.g., reviewing themes of issues across multiple businesses/ regions). Create aggregated risk picture for risk category at the enterprise level, using a combination of first line and independent second line assessments. In partnership with the 1LOD Enterprise-level risk program owner, provide the Business with operational risk guidance and advice through proactive engagement in strategic business initiatives / transactions and large remediation/crisis management efforts. Escalate significant or unaddressed risk issues and control environment concerns to BRCC and other governance forums as well as to Risk leadership.

Management and Leadership Characteristics:

• Broad experience in Operational Risk Management.  

• Specific subject matter expertise related to Third Party Risk stripe disciplines.

• Business understanding of the products and services Citi offers and how risk management practices contribute to other work across Citi / understand downstream impacts of decisions made.

• Track record of managing internal relationships and partnering with a range of stakeholders (e.g., business, functions) in leading sustained change and change management efforts.

• Ability to create and articulate sense of purpose and common vision for Risk management.

• Well-developed listening skills and a strong ability to communicate and engage at the senior management level, both orally and in writing

• Strong leadership skills with a proven track record of working with a diverse range of skill sets and perspectives, recognizing that the power of Citi is the sum of its parts.

• Ability to constructively challenge others at all levels and across boundaries to deliver better results.

• Continuous improvement mind-set to solve for root causes, assess impact of actions and adjust as needed; simplify and standardize at every opportunity.

• Strong regulatory engagement/ communication skills

Education, Knowledge, and Experience Qualifications:

• 15+ years direct experience as a senior risk professional in a large financial services organization with responsibility for managing third-party oversight programs and related operational processes.

• Proven subject matter expertise in operational risk management across various risk categories and how they interact with each other and on controls design and effectiveness assessments.

• Strong working knowledge of operational risk management frameworks in a global organization

• Demonstrated success in managing risk policy/strategy.

• Master’s degree/specialized training in operational risk management and/or operations management, related fields highly preferred

------------------------------------------------------

Job Family Group:

------------------------------------------------------

Job Family:

------------------------------------------------------

Time Type:

------------------------------------------------------

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the "EEO is the Law" poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting