Head of Enterprise Change and Business Enablement Risk, MD

Technology & Cyber Compliance And Operational Risk Office (Tccoro) At Citi

The Technology & Cyber Compliance and Operational Risk Office (TCCORO) at Citi is the firm's reliable second set of eyes. Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report and manage operational and compliance risks while promoting the implementation of actions to address root causes which may lead to unintended operational losses. TCCORO provides specialized subject matter expertise to challenge the Technology Estate across the firm and provide credible second line oversight to ensure the strategies meet business objectives. In essence, we are the technology and cyber conscious of the bank. In line with the ORM and ICRM frameworks, we aim to ensure that internal controls are designed to mitigate operational risks, are appropriately managed and aligned with our risk appetite to adhere to regulatory obligations and conformance with heightened standards.

Responsibilities

Reporting into the Global Head of TCCORO, the Head of Enterprise Change and Business Enablement Risk will have oversight responsibility for a significant change, program, and strategy portfolio of across the Enterprise and Franchise organizations. The coverage area responsibilities for this Managing Director position will oversee the Chief Technology Office, Business Architecture Office, Enterprise Change Management Function, and Program Management Office. Responsibilities entail the following :

• Leading a large second line function that is responsible for executing a holistic, integrated operating model inclusive of performance of technology capability maturity assessments, risk assessments, conducting credible challenge activities and ongoing monitoring against industry frameworks (i.e. COBIT, NIST CSF / CRI, etc.) and in compliance with the OCC's Heightened Standards.
• Oversight of the establishment and implementation of standards, procedures, and frameworks for the coverage domains.
• Perform independent review and credible challenge of the performance of universal key indicators and other metrics in support of the Technology and Cyber Risk Appetite Statements.
• Represent TCCRO / Second line of defense in various forums including Risk Forums, Safety & Soundness, Risk committees, Regulatory Updates, Internal and External Auditors, etc.
• Influence, and challenge as the organization implements the Transformation program that requires key Technology delivery.
• Oversight of the delivery and performance of technology solutions that are distributed globally to ensure appropriate controls are in place prior to deployment with minimal post implementation disruption.
• Clearly communicate to technology and business managers the impact of control weakness and design control deficiencies on service delivery capabilities.
• Energizes the team by communicating a compelling vision of the future; helps them identify opportunities for change and improvement during uncertainty.
• Inspires the team to constantly improve, own mistakes, and proactively share learnings with other teams; demonstrates deep curiosity to help the team learn and improve.
• Creates a team environment in which members are proactively invited to speak up, seek out, and debate alternative views; role-models agility to change course when presented with new information.
• Acts as a catalyst for change by identifying and championing ideas that benefit the organization; supports the team to safely experiment.

Building upon Citi's Operational Risk Management Framework, this Managing Director position will have responsibility to perform independent assessment of the technology capabilities in accordance with risk assessment and risk appetite performance to identify the inherent risks in Citi's infrastructure and security programs and services and reviewing the acceptability of residual risk. The ability to forge strong relationships across a variety of disciplines is vital to the success of this function. Further, staying abreast of key Tech, Cyber and Program Strategy trends, actively engaging the industry on latest and emerging operational Risks and authoring white papers will solidify credibility and contribute to best in class second line coverage.

Qualifications

This candidate will be an acknowledged thought leader in technology and cyber risk management with over 20 years of technology experience in complex IT management, tech / cyber risk, and controls with globally complex, dispersed, and diverse organizations.

The ideal Managing Director will have in-depth, detailed knowledge of technology risks and controls, infrastructure, cloud, and emerging Technology Management, Operations, and Information Security practices in the financial industry especially as it relates to enterprise functions and business sectors. This individual should have the following experience and skills :

Additionally, having in-depth, working knowledge of banking technologies, fraud, cybercrime detection and countermeasures, encryption, resiliency, data retention, as well as information security support for segregation of duties, application development, network and systems operation, testing and vendor management. Prior experience in previous roles should include companies with global technology infrastructure in global financial services firms.

Technology Skill set requirements will include capability to manage all aspects of these standards :

Strong Leadership Skills :

Logistics :

Education :

Job Family Group : Risk Management

Job Family : Operational Risk

Time Type : Full time

Primary Location : Wilmington Delaware United States

Primary Location Full Time Salary Range : $250,000.00 - $500,000.00

In addition to salary, Citi's offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including : medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (