This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The primary objective of this role is to provide Risk Control and log review services to Country Technology Teams and to support Regional Risk and Control Managers in implementing and monitoring risk mitigation activities within the Country Technology Teams.
Job Responsibility:
Lead the identification, assessment, and monitoring of technology risks
Oversee the design and implementation of technology controls
Manage and coordinate all internal and external technology audits, regulatory examinations, and compliance reviews
Provide expert guidance and support to technology managers and teams on risk management best practices
Manage the tracking and remediation of all technology-related audit findings, risk issues, and control deficiencies
Manage communication with local regulators and auditors regarding technology-related topics
Collaborate with other risk functions to ensure an integrated approach to enterprise-wide risk management
Works closely with regional control teams on risk and control subjects
Acts as a technology liaison for cyber security related cases
Manages the Local Log Review process and the team
Manages and coordinates application assessment committee processes and meetings
Prepares and sends letters to local regulators to get permission to use a new regional critical application
Assists all banks' units and joins regional calls to explain local regulatory requirements
Ensures that people management related tasks are executed in accordance with Citi policies and procedures
Ensures the managed department has the required quantity and quality workforce in place
Takes ownership of the managed team and implements Citi people management practices
Completes all tasks in connection with the organization's activity but not detailed in the current job description
Requirements:
10+ years of progressive experience in technology risk management, IT audit, information security, or IT governance, with a significant portion in the banking sector
In-depth knowledge of banking industry-specific regulations and compliance requirements
Strong understanding of IT control frameworks (e.g., COBIT, ITIL, NIST) and information security standards (e.g., ISO 27001)
Professional certifications such as CRISC, CISA, CISSP, or CISM are highly preferred
Exceptional analytical and problem-solving skills
Excellent written and verbal communication skills in English
Demonstrated ability to build and maintain effective working relationships
Strong leadership capabilities
Ability to thrive in a fast-paced, highly regulated, and dynamic environment
Familiarity with SDLC, databases, operating systems, application controls, encryption, development tools and processes
Strong follow-up skills
Strong negotiation skills
Delivery focused
Exhibits good attention to detail
Ability to work on several initiatives concurrently