Tech & Cyber Risk: Director - Technology & Cyber Risk (Hybrid)

The Technology & Cyber Compliance and Operational Risk Office (TCCORO) is responsible for second line oversight of the Tech stack enabling Citi’s businesses, material legal entities and product offerings.

A solid understanding of the financial services industry and direct competitors' products and services is necessary in order to evaluate risk of the commercial objectives to the business.

Requires thorough understanding of strategic direction of the function within the relevant part of the business, combined with a solid conceptual/practical grounding in both the function and/or area of expertise and related subject areas.

Excellent communication skills required in order to negotiate and present to senior constituents and external regulatory agencies.

Responsible for executing functional strategy in area managed to oversee first line activities and evaluate operational efficacy. Accountable for end results, budgeting, planning, policy formulation and contribution to future strategy of the TCCORO Business Cluster global area(s). This role will be a direct report to the Head of Business Cluster Technology Risk and Compliance and serve as an intergral member of the functional leadership team within the global business model.

Advanced communication and diplomacy skills are required to guide and influence others and accountable for the oversight of significant direct business results or authoritative advice regarding the operations of the business. Necessitates a degree of responsibility over technical strategy, large scale technology change management and ongoing production performance/monitoring.

The candidate will work closely with Country, Global ORM Business Coverage and L1 Risk Stripe Type SME teams to build a cohesive risk posture stature report and assessment of risk appetite.

Bilingual Spanish preferred, Portuguese a plus.

Working with colleagues in Risk, as well as technology, business and other control functions, the Banking Cluster Technology Risk Director is expected to contribute to perform the following:

Responsibilities:

• Governance and Oversight of technology risk;
• Support in the development of Policy and Standards;
• Oversight of Key Technology Operational Risks and related indicators and thresholds;
• Challenge of business and technology Risk Self-Assessments;
• Challenge of Business technology Scenario Analysis Perform internal and external event reviews specific to Banking businesses.
• Independently asses risks and drive actions to address the root causes that persistently lead to operational risk losses by challenging both historical and proposed practices.
• Advise on best practices leveraging expertise and industry insights
• Work with Businesses and control functions in reviewing and challenging new product or service proposals for NPAC review, including evaluating risks, identifying the need for compensating controls, determining health and adequacy of technology platforms to support business requirements, including capacity, resiliency, etc.
• Develops and maintains relationships across the business users and Lines of Defense to better understand and deliver customer requirements by responding to changes in the internal and external business environment
• Appropriately assess risk when business decisions are made, demonstrating consideration for the firm's reputation and safeguarding Citigroup, its clients, and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

• Establishes and oversees the application of operational risk policies, technology and tools, and governance processes to create lasting solutions for minimizing losses from failed internal processes, inadequate controls, and emerging risks.
• Understands risk frameworks and leads and oversees the execution and implementation of the frameworks.
• Understands risk management and effectively communicate risk functions to executives.
• Determines and sets the strategic direction and budget of the risk function.
• Interacts with first line teams and forming independent views on risk management.
• Utilizes risk management principles, including identification of risk controls.
• Upholds global regulatory and legal requirements for risk. Understands new risk regulations under development. Uses the requirements to develop policies and standards.
• Manages a staff of risk officers at various levels, with direct accountability for hiring and organizational structure. Has direct oversight for compensation, performance appraisals, staff development, training, etc. Provides input on performance and compensation recommendations for risk o