This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Citi Information Security Office (CISO) Technology Business Risk Group Manager candidate will work with their staff to support the APAC Citi Information Security Office (CISO) group, helping the team the associated risks for the CISO processes, domains, and product. While the support will be focused on the APAC group, this position will help influence global CISO Risk and Control processes. This will be done through designing, implementing, and monitoring of risk and control framework. Person will be required to work with SMEs on Internal and external Audits; drive compliance of processes, Infrastructure, and applications with Citi Policies; ensure the teams follow the issue management standards and contribute to an Effective Management Control Assessment.
Job Responsibility:
Be responsible for managing and supporting multiple risk and control programs for the organization
Accountable for management of complex/critical/large professional disciplinary areas, including leading and directing a team of professionals
Ensure that emerging risks identified are socialized with key stakeholders and mitigation strategies are in place
Identify areas of engagement based on level of investment, inherent risk, complexity of change and other risk factors
Execute Risk Control coverage strategy, ensure appropriate risk mitigation actions are in place and escalate to senior management as appropriate
Provide supervision of Risk Control team's efforts and assist with prioritizing and addressing roadblocks encountered
Identify and assign key metrics (e.g. KRI/KPIs) to support effective monitoring and management of operational risk including controls assurance
Provide strong oversight of CAP (Corrective Action Plan) remediation activities both for audit and control issues
Support assigned technology platform during internal and external audits
Leverage reporting to identify trends, themes and areas requiring improved controls
Drive Manager's Control Assessment monitoring, quarterly approvals and improvements required
Appropriately assess risk when business decisions are made
Complete all tasks in connection with the organization’s activity but not detailed in the current job description
Requirements:
10+ years’ experience in Risk and people management
Demonstrable Information Security Risk knowledge based on working in real-world environments & situations
Excellent communication skills required in order to negotiate internally, often at a senior level
Full management responsibility of a team or multiple teams
Prior experience dealing with regulators and auditors
Bachelor’s/University degree or equivalent experience, potentially Master’s degree
Relevant professional qualifications with Risk / Security management