Job Summary:
The GFT Technology Risk & Control Officer position is responsible for the execution of all control - related activities.   These activities include, but are not limited to: Consulting and advising technology teams on risks to their organization, issue and action plan management and tracking, support for internal/external audit activities, risk identification via self-assessments, and evaluation of application development projects for appropriate technology controls.
Responsibilities:
• Audit Support: • Monitor audit and exam deliverable requests, coordinate requests with SMT’s/staff, and work with Audit Coordinators and area control officers to validate deliverables against the request prior to submission to auditors.
• Track Audit/Exam results impacting GFT and assist with assembling audit information for management reporting.
• Notify Audit Coordinators and GFT Audit Manager of requests received from outside GFT which require support from GFT, whether from Internal or External sources, and any other items which need escalation.
• Notify the Audit Coordinator and GFT Audit Manager of any issues or observations noted by IA or external auditors in the region impacting GFT
• Perform required IBAM backtesting procedures upon issuance of Internal Audit findings from GFT reviews in a timely manner.
• General Risk & Control Support: • Assist in the planning, coordination and execution of all risk & control related activities impacting managers in GFT, as they relate to Citi Technology policies and standards  (CITMP/ CITMS/ CISS), Risk Identification and Self-Assessment of controls, management awareness and corrective action tracking of outstanding control issues.
• Work directly with the Senior Manager of Technology’s (SMT) and their staff (e.g. Application Managers) to ensure the implementation of the Control Programs within the organization.
• Ensure all Issues and Corrective Action Plans (CAPs) are completed, tracked, and monitored on a regular basis.
• Provide support and education to SMT teams on requirements within Citi policies and standards, e.g. CITMP / CISS, CISS, IS or Control initiatives, including communicating changes in said policies.
• Work with area SMT’s / Application Managers to proactively identify control gaps and open CAPs in accordance with IBAM criteria to ensure IBAM credit in the event of an audit finding.
• Review Control / metrics and scorecards to address all Yellow and Red items for their supported area.  Review scorecard issues with SCO and SMT’s during staff calls.  Escalate all repeat violations to SMT and Sr. Control Manager.
• Respond to IS & Control questionnaire submissions via the Project Management tool, and ensure reviewed is completed early during the Software Development Lifecycle (SDLC) process for required control deliverables. Track Control deliverables for the given project to completion.
• Enlist the aid of TISO, Third Party Risk manager, Export License Coordinator, COB Coordinator, RMO, or other Control staff as needed.
• Other Risk & Control activities as assigned.
Job Skills/Qualifications
• Bachelor's degree or equivalent experience - 6-10 years control/compliance experience in a medium, Multi-national Corporation or an entity with similar global reach and complexity.
• Experience in technology processes, working with senior managers
• Experience in project management or managing projects / work teams.
• Knowledge of software development life cycle.
• Effective interpersonal skills and ability to participate in and lead "virtual" teams.
• Excellent written and verbal communication skills.
• Ability to effectively interact with cross functional teams and all levels of management.
• Must be a motivated, self-starter who can independently handle tasks with little oversight.
• Solid analytical and problem-solving abilities.
• Demonstrated organization skills with the ability to multi-task effectively in a high-volume environment
• High degree of attention to detail.
• Ability to work well under pressure, quickly take on new tasks and complete them within deadline.
• Power User of: Word; Excel; Access; PowerPoint and Visio
Educational Level: Bachelor's Degree
Required Travel: Less than 10%
-------------------------------------------------
Job Family Group:
Risk Management
-------------------------------------------------
Job Family:
Business Risk & Controls
------------------------------------------------------
Time Type:
------------------------------------------------------
Citi is an equal opportunity and affirmative action employer.
Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi .
View the " EEO is the Law " poster. View the EEO is the Law Supplement .
View the EEO Policy Statement .
View the Pay Transparency Posting