Data Risk Officer - Structural Elements Oversight, Senior Vice President

Operational Risk Management (ORM) is an enterprise-level independent risk management function responsible for enterprise-wide oversight and aggregation of operational risk. Its mandate covers all business lines (US Personal Banking, Global Wealth Management, Markets, Services, Banking, Global Functions, and Enterprise Technology & Operations) spanning all geographies. The ORM function oversees the design and implementation of the non-financial risk management framework. Key objectives of the data risk management framework include:

• Operating model, staffing, and culture
• Operational risk appetite
• Control objectives and standards
• Operational risk and control assessments and reporting
• Strategic decision-making
• The effective execution of Citi's Enterprise Data transformation

Because Citi's Enterprise Data transformation cuts across the enterprise and is multi-disciplinary in nature, ORM's oversight for data risk management at Citi relies upon a “Hub and Spoke” approach, incorporating the second line of defense (2LOD) Business/Region/Legal Vehicle Global Op Risk Officers and other relevant independent risk functions. These teams work collectively to dispense appropriate risk oversight responsibilities, ensuring well-coordinated risk assessments, risk identification, measurement/monitoring, and timely remediation of key gaps. Furthermore, the ORM Data Risk team delivers an enterprise-level aggregation of risk oversight outcomes to assess the firm's progress toward the Data Transformation target state.

The Data Risk Officer – Structural Elements Oversight, Senior Vice President role will serve as a subject matter expert on the design and implementation of structural elements for data management, providing oversight and 2LOD challenge focusing on foundational capabilities, including policies, standards, procedures, governance models, staffing, training, controls, and enterprise programs to reduce data quality concerns and adjustments.  

Key Responsibilities:

• Oversee and challenge the design and implementation of the firm’s data governance structure, policies, standards, and procedures, including the design and performance of associated compliance metrics
• Assess the adequacy of the firm’s budgeting process, staffing levels, skills and expertise, and training programs to appropriately support its data governance requirements
• Oversee the firm’s efforts to evaluate data exceptions and manage the remediation of data quality concerns
• Evaluate the enterprise framework to continually reduce manual inputs and adjustments across the enterprise data lifecycle and oversee the adoption of this framework
• Contribute to identifying and executing independent second-line risk assessments, in coordination with other ORM teams where needed (e.g., contributing to challenges of specific risk appetite metrics) to meet internal commitments
• Participate in internal knowledge sharing initiatives
• Help ensure that this multidisciplinary and cross-cutting risk area is well understood and that the implications of firm-wide remediation efforts are understood in terms of managing "path-to-green" efforts to operate within the firm’s risk appetite.
• Assist in the negotiation and remediation of identified risk and control concerns
• Prepare materials for escalation of significant or unaddressed risk issues and control environment concerns to appropriate governance forums and Risk leadership
• As needed, support the primary interface to key stakeholders such as regulators, senior management, and the Board, as it relates to 2LOD assessment/point of view for the Risk Category
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of teams and create accountability with those who fail to maintain these standards

Qualifications:

• Experience: 7-10 years of direct experience in a non-financial risk  (data, technology, and/or reporting risk), audit, or relevant 1LOD function within a large financial services organization.
• Risk Management Knowledge: Experience in identifying and assessing non-financial risks and controls. Proficient in risk assessment principles and supervisory expectations in terms of the quantity and quality of operational risk management.
• Data Management Fundamentals: Demonstrable understanding of Data Management fundam