Job Description
As a member of the Enterprise Technology and Cyber Risk team within Operational Risk Management, this role will plan, co-ordinate and conduct reviews of the coverage and effectiveness of governance frameworks, methodologies and processes related to the oversight of Citi's Operational Resilience. The position will also support the identification of business and technology operational resiliency risks through monitoring performance metrics and review and challenge of key processes. Individuals in this role will have the ability to understand complex business processes, be familiar with complex IT and Information Security technical controls and be able to assess the implications of both current and emerging threats to Citi’s operational resilience.
Job Responsibilities:
• Planning, co-coordinating and conducting in-depth, independent assessments of operational resilience plans including assessments of business applications, systems, and processes according to an established risk management framework.
• Assesses the comprehensiveness and effectiveness of first line risk management.
• Identify operational resiliency risks, including technology and cyber risks, and develop recommendations to mitigate operational risks to critical business services.
• Performing an analysis of both quantitative and qualitative data to identify key risk themes.
• Monitoring of key performance and risk indicators and reporting/escalating issues with transparency.
• Writing detailed assessment reports containing findings, observations, and recommendations.
• Tracking and monitoring of risk mitigations plans.
Desired Experience and Skills:
• Minimum 5 years of experience in IT Risk Management, Business Continuity Management, Cyber Security, Information Security, or related operational risk management function.
• Bachelor's degree in Computer Science, Business Administration, Mathematics, Science, Technology, Engineering, or other relevant professional field of study is preferred.
• Industry recognized Information Security certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) certifications, or other related certifications is preferred.
• Demonstrates considerable technical knowledge of operational risk management, operational resilience, cyber security, data protection, IT Risk, Business Continuity Management, or IT Audit/Compliance.
• Proven experience of overseeing or conducting independent risk assessments, business process or IT control auditing.
• Good knowledge of relevant industry standards/regulations (e.g. ISO, NIST, PCI-DSS, PSD2, GDPR, etc.).
• Experience of working in a large multinational financial institution it advantageous.
• A broad understanding of global financial business activities such as Markets and Trading, Payment Services, Investment Banking and Consumer Banking.
• Excellent communication and organization skills.
• Developed communication and diplomacy skills are required in order to guide and influence others.
• Good analytical skills in order to filter prioritize and validate potentially complex material from multiple sources.
• Proven experience of interfacing with senior, C-level stakeholders.
• Execution and delivery focused, creating high quality reporting and analysis using appropriate business and technical language for the audience.
Education:
• Bachelor’s/University degree, or a minimum of 7 years equivalent experience
• Certification within the business continuity management industry (DRI, BCI, ISO, etc.)
-------------------------------------------------
Job Family Group:
Risk Management
-------------------------------------------------
Job Family:
Operational Risk
------------------------------------------------------
Time Type:
------------------------------------------------------
Citi is an equal opportunity and affirmative action employer.
Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi .
View the " EEO is the Law " poster. View the EEO is the Law Supplement .
View the EEO Policy Statement .
View the Pay Transparency Posting