This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Cyber / Tech Risk Officer is a strategic professional who stays abreast of developments within own field and contributes to directional strategy by considering their application in own job and the business. Recognized technical authority for Cyber risk area within the business and is responsible for the oversight of the Banking, & International governance and oversight of operational risk, Cyber Risk, and applicable regulatory, compliance and firm requirements. This individual will cover various disciplines including but not limited to the areas of Cyber including Information Security, Electronic Communications, Control development/Monitoring.
Job Responsibility:
Oversee the application of Cyber risk policies, technology, and governance processes to create lasting solutions for minimizing losses from failed internal processes, inadequate controls, and emerging risks
Design, development, delivery and maintenance of best-in-class Cyber Risk, Technology Risk, programs, and practices for Risk
Review and address issues identified within various Cyber programs and ensure all issues related to Internal Audit, and External Auditors are closed by their original target date
Analyze comparative data, prepare and present regional and global reports related to cyber risk assessments, and monitoring of cyber and Technology related issues
Support and assist with the identification and reporting of any Electronic Communication Policy breaches
Review of High Risk System access
Supporting the MCA process and monitoring risks and issues identified for the Line of Business
Assess risk and drive actions to address the root causes that persistently lead to operational risk losses by challenging both historical and proposed practices
Assess the comprehensiveness and effectiveness of Citi’s current first line defenses
Manage internal projects on Cyber issues that support a variety of participants and stakeholders measuring the effectiveness and comprehensiveness of Citi’s first line defenses
Ensure compliance with all relevant regulatory requirements and internal policies
Partner with internal audit, business units, and senior management, communicating effectively to drive issue resolution, influence decision-making, and promote a culture of risk awareness
Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency
Requirements:
6-10 years relevant experience in operational risk management, Cyber Risk, compliance, audit, or other control-related functions in the financial services industry
Ability to identify, measure, and manage key risks and controls
CRISC or CISM Certification
Strong knowledge in the development and execution for controls
Proven experience in control related functions in the financial industry
Track record of success in implementing sustainable solutions and improving processes
Understanding of compliance laws, rules, regulations, and best practices
A solid grasp of Citi’s Policies, Standards, and Procedures
Strong analytical skills to evaluate complex risk and control activities and processes
Exceptional verbal and written communication skills, with a demonstrated ability to engage at the senior management level
Solid problem-solving and decision-making skills
Ability to manage multiple tasks and priorities
Proficiency in Microsoft Office suite, particularly Excel, PowerPoint, and Word
Developed communication and diplomacy skills are required in order to guide, influence and convince others, in particular colleagues in other areas