Data Architecture Risk, Senior Vice President

Individuals in Operational Risk establish and manage operational risk policies, propose strategies, and governance processes designed to minimize losses from inadequate controls, fraud, and potential bankruptcy. This includes supervision over technology operational risk, cyber risk, and fraud risk. These individuals are also responsible for the development of tools and infrastructure that support fraud monitoring and prevention, using advanced analytical and statistical skills to identify policy gaps and recommend changes to current policies. This role is crucial to the company as it fortifies against potential operational risks, thereby protecting the company's financial stability and reputation, and contributing towards the overall business resilience and success.

Data Architecture Risk SVP

Operational Risk Management (ORM) is an enterprise-level independent risk management function responsible for enterprise-wide oversight and aggregation of operational risk. Its mandate covers all business lines (US Personal Banking, Global Wealth Management, Markets, Services, Banking, Global Functions & EO&T) spanning all geographies.

The ORM function oversees the design and implementation of the non-financial risk management framework. Key objectives of the risk management framework for Data Risk are:

• Operating model, staffing, and culture
• Operational risk appetite
• Control objectives and standards
• Operational risk and control assessments and reporting
• Strategic decision-making
• The effective execution of Citi's Enterprise Data transformation.

Because Citi's Enterprise Data transformation cuts across the enterprise and is multi-disciplinary in nature, ORM's oversight for data risk management at Citi relies upon a “Hub and Spoke” approach, incorporating the second line of defense (2LOD) Business/Region/LV Global Op Risk Officers and other relevant independent risk functions. These teams work collectively to dispense appropriate risk oversight responsibilities, ensuring well-coordinated risk assessments, risk identification, measurement/monitoring, and timely remediation of key gaps. Furthermore, the ORM Data Risk team delivers an enterprise-level aggregation of risk oversight outcomes to assess the firm’s progress toward the Data Transformation target state.

The Data Architecture Risk Manager, C14, will lead data architecture and data domain centric risk assessments of data remediation efforts across Citi, as well providing data architecture and data domain risk SME expertise. This role will be accountable for providing leadership for hub only, as well as hub-and-spoke challenges for coverage of data remediation efforts to meet regulatory commitments.

Key Responsibilities

Control objectives and standards: Ensure Enterprise Control Standard and controls design requirements are clearly articulated and implemented consistently across Business and Function coverage teams

Strategic decision making: Execute and contribute to continuously improving Data Risk Management practices, insights and tools which are consistently embedded in day-to-day business processes and strategic decision-making of Business and Function coverage teams to enable proactive issue identification and comprehensive remediation. 

Transformation: In addition to overseeing the compliance against ORM frameworks, Data Risk Management has the added complexity of overseeing the effective execution of the Enterprise Data transformation.  This transformation cuts across the enterprise and is multi-disciplinary in nature

• Mentor and advise on the Data Risk concepts and skills to all three lines of defense as part of ongoing execution of the operating model.
• Negotiate and remediate resulting risk and control concerns identified.
• Escalate significant or unaddressed risk issues and control environment concerns to appropriate channels.
• Contribute to ongoing business-as-usual activities associated to maintenance of policies, standards, and procedures as assigned.

Leadership Characteristics:

• Experience in risk management, including a successful track record of executing risk management challenges at a large financial services organization.
• Subject matter expertise in Non-Financial Risk Management with a proven risk and control track record in technology, data, and/or reporting risk.
• Business understanding of the products and services Citi offers and how risk management practices contribute to other work across Citi; understand downstream impacts of decisions made.
• Track record of managing internal relationships and partnering with a range of stakeholders (e.g., business, functions) in leading sustained change and change management efforts.
• Strong technical problem-solving skills and an ab