Background / Context:
Operational Risk Management – Technical / Cyber / Data Management (ORM-TCD) department is part of Citi’s second line of defense (2LoD).  Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report and manage operational risks while promoting the implementation of actions to address root causes which may lead to unintended operational losses.
ORM-TCD consists of experienced professionals who provide subject matter expertise to objectively evaluate, independently oversee, and constructively challenge first line of defense (1LoD) teams, governance, processes, and controls.
As a member of the Enterprise Technology and Cyber Risk team within Operational Risk Management, this role will lead the planning, co-ordination and execution of reviews over the coverage and effectiveness of governance frameworks, methodologies and processes related to Operational Resilience. The position will also oversee the identification of business and technology operational resiliency risks through monitoring performance metrics and review and challenge of key processes. Individuals in this role will have extensive leadership experience, the ability to understand complex business processes, be familiar with complex IT and Information Security technical controls, and be able to assess the implications of both current and emerging threats to Citi’s operational resilience.
Job Responsibilities:
• Thought leadership as well as managerial leadership for the second line oversight of operation resilience.
• Directing, planning and co-coordinating the execution of in-depth, independent assessments of operational resilience plans including assessments of business applications, systems and processes according to an established risk management framework.
• Identify operational resiliency risks, including technology and cyber risks, and develop recommendations to mitigate operational risks to critical business services.
• Monitoring of key performance and risk indicators, and reporting/escalating issues.
• Delivering findings, observations and recommendations to key stakeholders.
• Tracking and monitoring of risk mitigation plans.
• Escalation of issues to senior executives.
• Representation of key issues on senior executive oversight committees
Desired Experience:
• Minimum of 12 years of experience in IT, Risk Management, Business Continuity Management, Cyber Security, Information Security or related operational risk management function.
• Bachelor's degree in Computer Science, Business Administration, Mathematics, Science, Technology, Engineering or other relevant professional field of study is preferred.
• Industry recognized Information Security certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) certifications, or other related certifications is preferred.
• Demonstrates considerable technical knowledge of operational risk management, operational resilience, cyber security, data protection, IT Risk, Business Continuity Management or IT Audit/Compliance.
• Proven experience of leading independent oversight work as part of complex global ecosystem.
• Experience of working in a large multinational financial institution is preferred.
• A solid understanding of global financial business activities such as Markets and Trading, Payment Services, Investment Banking and Consumer Banking.
• Proven experience of interacting with senior, C-level stakeholders and board level executives.
• Excellent diplomatic, communication and organization skills.
• Highly effective conflict management skills and experience.
EEO Statement: Citi is an equal opportunity and affirmative action employer. Minority/Female/Veteran/Individuals with Disabilities/Sexual Orientation/Gender Identity Pay Transparency: Citi won’t discriminate against anyone for discussing pay, but those with access to pay data in their work can’t disclose it unless responding to complaints/investigations or legal requirements.
-------------------------------------------------
Job Family Group:
Risk Management
-------------------------------------------------
Job Family:
Operational Risk
------------------------------------------------------
Time Type:
Full time
------------------------------------------------------
Citi is an equal opportunity and affirmative action employer.
Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi .
View the " EEO is the Law " poster. View the EEO is the Law Supplement .
View the EEO Policy Statement .
View the Pay Transparency Posting
Job Type: Full time