Director, ORM Data Risk Aggregation and Horizontal Insights

Operational Risk Management (ORM) is an enterprise-level independent risk management function responsible for enterprise-wide oversight and aggregation of operational risk. Its mandate covers all business lines (US Personal Banking, Global Wealth Management, Markets, Services, Banking, Global Functions & EO&T) spanning all geographies.

The ORM function oversees the design and implementation of the non-financial risk management framework. Key objectives of the data risk management framework include:

• Operating model, staffing, and culture
• Operational risk appetite
• Control objectives and standards
• Operational risk and control assessments and reporting
• Strategic decision-making
• The effective execution of Citi's Enterprise Data transformation

Because Citi's Enterprise Data transformation cuts across the enterprise and is multi-disciplinary in nature, ORM's oversight for data risk management at Citi relies upon a “Hub and Spoke” approach, incorporating the second line of defense (2LOD) Business/Region/LV Global Op Risk Officers and other relevant independent risk functions. These teams work collectively to dispense appropriate risk oversight responsibilities, ensuring well-coordinated risk assessments, risk identification, measurement/monitoring, and timely remediation of key gaps. Furthermore, the ORM Data Risk team delivers an enterprise-level aggregation of risk oversight outcomes to assess the firm’s progress toward the Data Transformation target state.

The Data Risk Aggregation and Horizontal Insights, Director C15 role will lead an internal risk reporting function to consolidate a range of 2LOD challenge activity into a concise and well-presented internal management presentation on a quarterly basis to articulate the 2LOD view on Citi’s data risk profile. This role will lead a small reporting team that relies upon multiple other teams globally.

What you’ll do:

• Lead the internal risk reporting function end-to-end, from planning and requirements through presentation delivery on a cyclical basis.
• Be accountable for assessing the quality of risk reporting inputs, resolving concerns, and incorporating a wide variety of inputs into a concise and highly qualitative report.
• Serve as the central accountable leader for report production and delivery, balancing communications on process with the substance of data risk oversight efforts.
• Negotiate and remediate resulting risk and control concerns identified.
• Escalate significant or unaddressed risk issues and control environment concerns to appropriate governance forums and Risk leadership.
• As needed, serve as the primary interface to key stakeholders such as regulators, senior management, and the Board, as it relates to 2LOD assessment/point of view for the Risk Category.
• Broad experience in risk management, including a successful track record of managing large, complex, enterprise-wide risk management programs at a large financial services organization.
• Focused experience in non-financial risk management, specifically data, technology, and/or reporting risk.
• Demonstrated success in synthesizing multiple complex inputs into a cohesive and logically consistent analysis.
• Exceptional communication and presentation skills, with the ability to translate complex data into clear and concise narratives for senior management. Proficient in delivering finished management reports end-to-end, specifically highly qualitative reports.
• Track record of managing internal relationships and partnering with a range of stakeholders (e.g., business, functions) in leading sustained change and change management efforts.
• Strong technical problem-solving skills and an ability to identify conflicts, discrepancies, and other issues, and bring together the right team to solve them.
• Well-developed listening skills and a strong ability to communicate and engage at the senior management level, both orally and in writing.
• Ability to constructively challenge others at all levels and across boundaries to deliver better results.
• Continuous improvement mind-set to solve for root causes, assess the impact of actions, and adjust as needed; simplify and standardize at every opportunity.
• Regulatory engagement experience.

What we’ll need from you:

• 10+ years of direct experience as a senior Non-Financial Risk professional (data, technology, or reporting risk) or equivalent 1LOD role in a large financial services organization.
• Strong analytical and writing skills with a track record in the hands-on delivery of concise technical work products.
• Extensive experience navigating complex data sourcing and technical delivery environments needed to produce high-quality reports. Experience applyin