Technology Risk and Control Group Manager, SVP

Brief Description of the Organization

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Our mission is to serve as a trusted partner to our clients by responsibly providing financial services that enable growth and economic progress. We strive to earn and maintain our clients’ and the public’s trust by constantly adhering to the highest ethical standards and making a positive impact on the communities we serve.

Overview of the Role

The Business Risk and Control Group Manager is accountable for management of complex/critical/large professional disciplinary areas. Leads and directs a team of professionals. Requires a comprehensive understanding of multiple areas within a function and how they interact to achieve the objectives of the function. Applies in-depth understanding of the business impact of technical contributions. Strong commercial awareness is a necessity. Generally accountable for delivery of a full range of services to one or more businesses/ geographic regions. Excellent communication skills required to negotiate internally, often at a senior level. Some external communication may be necessary. Accountable for the end results of an area. Exercises control over resources, policy formulation and planning. Primarily affects a sub-function. Involved in short to medium term planning of actions and resources for own area. Full management responsibility of a team or multiple teams, including management of people, budget, and planning, to include performance evaluation, compensation, hiring, disciplinary actions and terminations and budget approval.

Responsibilities:

• Establishes and oversees the application of operational risk policies, technology and tools, and governance processes to create lasting solutions for minimizing losses from failed internal processes, inadequate controls, and emerging risks.

• Independently asses’ risks and drive actions to address the root causes that persistently lead to operational risk losses by challenging both historical and proposed practices.

• Governance and oversight may include (not limited to) technology operational risk, cyber risk for example.

• Serves as an oversight function working with the In-Business OR and Independent Risk Teams

• Drives – Operation Risk Anticipation, Mitigation and Loss Recovery (and respective Recovery Plans)

• Ensures Operation Risk Policy implementation and exception approvals

• Informs Operational Risk Council on Sub-Segment Level OR related matters

• Attends In Business Risk Committees

• Responsible for the quality, completeness, and accuracy of the implementation of the Control Framework, including Risk Control Policy, Control Standard, Issue Management Policy, Lesson Learned Policy, and Control Inventory.

• Manage and allocate resource for the identification of issue root cause, partnering with control and process owners to recommend holistic corrective actions and improvements, provide check and challenge to ensure appropriate escalation in according with Issue Management and Escalation Policies.

• Assist in directing teams in the implementation of the Lessons Learned Policy, including monitoring of control breaches and dissemination and learnings across other business units for process improvement to limit the occurrence of similar future events and where similar risk exposure might exist.

• Support, review, and challenge, the effective design and management of controls to mitigate risks as required by the Control Standards, including implementation and operation, conducting the control monitoring, handling deficiencies, and escalating issues for resolution.

• Allocate resource to identify, assess, escalate, and manage risk exposures across Risk Categories (Operational Compliance, Strategic, Reputational, etc), including material, emerging and concentration risks in accordance with enterprise Policies and the establishment of Key Indicators to monitor risk exposures.

• Take ownership to identify, assess, record and response to Operational and Compliance Risk events, ensuring these are captured accurately, timely and in accordance with requirements.

• Assess the risks associated with New Activities and changes to the Business, ensuring these are well understood and adequately controlled (if applicable).

• Guide and influence standards and procedures that conform to enterprise requirements and support sound operational and compliance risk management.

• Apply knowledge of the business, products, or services to identify and implement control points and processes throughout the business.

• Appropriately assess risk when business decisions are made, demonstrating consideration for the firm's reputation and safeguarding Citigroup, its clients, and assets, by driving compliance with applicable laws, rules, and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing, and reporting control issues with transparency.

Qualifications:

• 10+ years relevant experience

• Significant experience in Technology Risk is a must. Other risk and control disciplines would be a plus – operations, banking, etc.

• Strong technical aptitude and relevant experience is required,

• Deep understanding of software delivery processes and practices is a required.

• Experience in Internal Audit or Financial Control would be desirable. Expertise in the following would be beneficial: Fraud Awareness and Risk Management Operations and Systems (Information Security Standards, Vendor/Outsourcing Management and MCA Legal and Regulatory Compliance Management of a global operations and a complex environment that includes global teams.

• Excellent communication skills – verbal & written

Education:

Bachelor's/University degree.

Additional Job Description

------------------------------------------------------

Job Family Group:

------------------------------------------------------

Job Family:

------------------------------------------------------

Time Type:

------------------------------------------------------

Primary Location:

------------------------------------------------------

Primary Location Full Time Salary Range:

In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.

------------------------------------------------------

Anticipated Posting Close Date:

------------------------------------------------------

Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View the "EEO is the Law" poster. View the EEO is the Law Supplement.

View the EEO Policy Statement.

View the Pay Transparency Posting