The Technology Risk Officer is a strategic professional who stays abreast of developments within own field and contributes to directional strategy by considering their application in own job and the business. Recognized technical authority for an area within the business. Requires basic commercial awareness. There are typically multiple people within the business that provide the same level of subject matter expertise. Developed communication and diplomacy skills are required in order to guide, influence and convince others, in particular colleagues in other areas and occasional external customers. Significant impact on the area through complex deliverables. Provides advice and counsel related to the technology or operations of the business. Work impacts an entire area, which eventually affects the overall performance and effectiveness of the sub-function/job family.
Responsibilities:
• Issue Identification: Through proactive interactions with customers ensure timely identification and reporting of control deficiencies via documented issue management practices.
• Issue Management: Oversee Corrective Actions ensuring on time remediation and appropriate management of reporting issue status.
• Audit Management: Oversee and manage all audit related activities such as, ensuring factual accuracy and documentation of corrective actions.
• Manager's Control Assessment (MCA): Ensure appropriate Risks, Controls, Tests and Key Risk Indicators are in place and reported on.
• Cross-Border Clearance Processing: Partnering with cross-border stakeholders and Citi Technology Infrastructure (CTI) to assist in compliance with cross border requirements.
• Vulnerability Threat Management (VTM): Oversee VTMs to ensure timely remediation. Work with CTI to monitor, track and escalate exceptions to the VTM standard.
• Risk Oversight: In collaboration with Information Security Officers, oversee the compliance of Risk Exceptions, Functional IDs, Vulnerability Assessments, IS Risk Assessments and Privileged Access requirements.
Qualifications:
• 5+ years of relevant work experience in Risk and Controls related area is required
• Knowledge of End User Computing technologies (email, remote access, desktops, help desk, voice technologies) is a plus.
• Technology Risk Management or equivalent Audit or Regulatory experience preferred.
• MS Office
• Consistently demonstrates clear and concise written and verbal communication skills
• Effective organizational influencing skills required.
• Excellent problem solving skills Ability to see the big pictures with high attention to critical details
• Demonstrated ability to develop and implement strategy and process improvement initiatives.
Education:
• Bachelor’s/University degree or equivalent experience, potentially Masters degree
-------------------------------------------------
Job Family Group:
Risk Management
-------------------------------------------------
Job Family:
Business Risk & Controls
------------------------------------------------------
Time Type:
------------------------------------------------------
Citi is an equal opportunity and affirmative action employer.
Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi .
View the " EEO is the Law " poster. View the EEO is the Law Supplement .
View the EEO Policy Statement .
View the Pay Transparency Posting