Compliance Assurance Sr. Analyst

• Perform independent, full-scope, and targeted compliance tests on technology and cybersecurity controls to assess their design and operating effectiveness.
• Conduct regular and comprehensive technology and cyber risk assessments, documenting findings and recommendations to reduce risk exposure.
• Assess and test risks associated with End-User Computing (EUC), and IT enabaled Smart Solution (ITeSS) focusing on its principles, cycles and overall governance.
• Independently evaluate technology and cyber risks within the business to ensure they are within the acceptable risk appetite, taking proactive measures to address areas of concern.
• Build and maintain effective engagement with the 1st Line of Defense, business partners, and other key stakeholders to understand their risk profiles, strategic priorities, and challenges.
• Provide expert guidance on technology and cyber risk mitigation strategies and control enhancements.
• Participate in initiatives to augment technology and cyber risk management practices. Support the development and implementation of enhanced procedures and methodologies.
• Ensure all technology and cyber risk management activities adhere to internal policies, external regulations, and industry standards.
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.
• Analyze data to identify trends, emerging risks, and control gaps, providing timely recommendations to mitigate risk exposure.
• Provide consistent, high-quality reporting to senior management and stakeholders on the status of assessments, detailing current risks, findings, and potential areas of concern.

• A minimum of 5 years of experience in a Technology Risk Management, Cyber Risk, Information Security, IT Audit, or a related controls-focused role.
• Direct experience in performing compliance testing, assurance, or audits for technology and/or cybersecurity controls.
• Strong understanding of the risks and controls related to End-User Computing (EUC) and associated data management.
• Solid understanding of IT systems, networks, cloud services, security infrastructure, and system vulnerabilities.
• Familiarity with regulatory requirements and enterprise risk management frameworks (e.g., COBIT, NIST, ISO 27001).
• Demonstrated experience in the risk management lifecycle, including risk identification, assessment, mitigation, and reporting.
• Excellent project management and organizational skills, with the ability to prioritize tasks and manage multiple initiatives effectively.
• Strong analytical, problem-solving, and decision-making skills.
• Bachelor's/University degree or equivalent experience.

Knowledge of how to apply Artificial Intelligence (AI), machine learning, or data analytics techniques to enhance risk assessment, automate testing, and improve compliance processes.

• Programs and services for physical and mental well-being including access to telehealth options, health advocates, confidential counseling and more.
• Expanded Paid Parental Leave Policy.
• Programs to manage financial well-being and help plan for the future.
• Access to an array of learning and development resources.
• Generous paid time off packages.
• Resources and tools to volunteer in the communities.