Third Party Group Manager In business Risk Lead, SVP

The Third Party Officer (“TPO”) is a dedicated role as part of Citi’s Third Party Risk Management program. The Third Party Officer will dedicate the majority of their time focused on ensuring effective risk management practices are in place for those external third party relationships which carry the highest degree of risk for Citi’s businesses. The TPO requires in depth business product knowledge and expertise and will provide risk management for the third party relationship. The TPO will work in concert with business operations and technology teams, as well as internal functions, to identify, manage and mitigate risk. The TPO will be supported by the Enterprise Supply Chain Third Party Utility which is responsible for the execution of standard third party risk management activities that can be conducted centrally to drive operational efficiencies. Full management responsibility of a team or multiple teams, including management of people, budget and planning, to include performance evaluation, compensation, hiring, disciplinary actions and terminations and budget approval.

Responsibilities:

• Gain thorough knowledge and understanding of Citi Third Party Risk Management requirements
• Represent business leadership to coordinate and facilitate Third Party Risk Management activities
• Evaluate current market conditions and provide insight on trends/issues that may impact the business through the use of external Third Parties.
• Complete or provide advise to BAO on the Risk Assessment for third party and reevaluate as required; identify any significant changes in relationship to trigger update of Risk Assessment
• Verify third party’s compliance to required policies and controls
• Partner with business operations, technology teams and internal functions to conduct on-site visits of third party, as required
• Maintains and updates Citi’s Exit Strategy Plans as required; when the exit strategy poses significant risk to Citi, work with business contacts to establish appropriate risk mitigation activities to minimize risk to Citi
• Interact with third parties on escalations of non-performance and contractual issues to drive resolution when appropriate
• Monitor and evidence third party performance and SLs through Citi Performance Management Assessment (PMA) process
• Verify that Third Party contracts (e.g. Statements of Work) are properly executed and uploaded in Citi’s Contract Management System (eSourcing), working with the Enterprise Supply Chain (ESC) organization if re-negotiations are required
• In conjunction with the business and operations teams, review, prioritize, assess and act on results of TPRM assessments/controls with the proper support from various internal functions (e.g., IS, CoB, DPO, Export, Credit Risk, Country Risk, Financial Evaluations)
• Facilitate Own remediation of issues or gaps identified as part of ongoing monitoring
• Define risk mitigation strategies and risk exceptions based on the business’ risk appetite
• Provide thought leadership to drive supplier optimization and efficiencies based on Third Parties risk profiles, performance, and market trends
• Standardize SLs performance monitoring measures for like services, where possible
• As appropriate, interact with larger TPO community and/or ESC category leads for sharing of best practices and coordination of services
• Liaise with the ESC Third Party Utility, as necessary, to review and respond to the results of third party risk management activities conducted centrally by the Utility
• Draft and present succinct executive briefs; prepare and present high-level metrics to applicable Citi senior management and stakeholders when needed
• Serve as point of contact to ensure that third party’s remediation of audit or exam issues is sufficient, and escalate as necessary
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards.

Qualifications:

• 10+ years of relevant experience in, strategic sourcing/procurement, vendor management risk management and/or regulatory compliance in one or more of the following risk disciplines: technology risk, business continuity, operational risk, supplier risk, or audit and controls. Broad knowledge of other risk areas, with strong understanding of supplier or third-party risk impact in a financial services co