Global Head of Operational Risk - Markets & Broker Dealers
Listed on 2026-03-12
-
Management
Risk Manager/Analyst -
Finance & Banking
Risk Manager/Analyst, Financial Compliance
Operational Risk Management (ORM) is an enterprise-level independent risk management function responsible for enterprise-wide oversight and aggregation of operational risk. Its mandate covers all business lines (U.S. Consumer Cards, Wealth Management, Services, Markets, Banking & International, and Client) along with Functions (e.g., Technology, Finance, COO, HR, etc.) spanning all geographies.
The ORM function oversees the design and implementation of the non-financial risk management framework. Key objectives of the risk management framework are:
- Operating model, staffing and culture:
Ensure the operating model across lines of defense is clear and consistent with sufficient resources, expertise, accountability and stature, and that it is enabled by structured training and awareness program to effectively manage and oversee operational risk - Operational risk appetite:
Clearly articulate risk definitions and appetite and make sure they are aligned against the most critical business outcomes to ensure strategic relevance and application at business, country and entity levels and that Citi operates within its set risk appetite - Control objectives and standards:
Ensure Enterprise Control Standard and controls design requirements are clearly articulated and that control objectives and requirements are defined at appropriate risk category and sub-category levels to ensure consistent control design and effectiveness - Operational risk and control assessments and reporting:
Oversee that Management Control Self
- Assessment (MCA) is fit for purpose and is owned with full buy-in from the 1st line, and that it is supplemented by a suite of other fit‑for‑purpose assessments (e.g., risk category specific assessments, scenario analysis, and lessons learned). Ensure assessment results are communicated through clear reporting with thematic and actionable insights - Strategic decision making:
Oversee that Risk Management practices, insights and tools are consistently embedded in day‑to‑day business processes and strategic decision‑making to enable proactive issue identification and comprehensive remediation
The 2nd LoD Global Head of ORM
- Markets & Broker‑Dealers is responsible for leading ORM’s oversight, review, and challenge of Citi’s sales and trading businesses and its most material broker‑dealer entities. They will face off with 1st line enterprise roles and will be working closely with Business and Cluster Operational in dispensing their key risk oversight responsibilities to ensure well‑coordinated risk assessments, risk identification, measurement/monitoring and timely remediation of key gaps including appropriate enterprise‑level aggregation.
- Own and drive implementation and maintenance of the operational risk management framework including: policies, standards, technology and tools, monitoring and governance for Global Markets end‑to‑end inclusive of product control and business execution / Markets Operations.
- Review and agree with 1
LOD the Appetite or Tolerance levels for Operational Risk categories together with the key indicators and thresholds for warning and breach. - Ensure that Ops Risk for the Business (and country/business/LV, as applicable) is managed to defined Risk Appetite or Tolerance levels. In case risk levels are in potential and/or actual breach of defined thresholds, ensure risk exposure is well understood and there is a robust Path to Green to avert/remediate breach within an acceptable time frame.
- Review and confirm appropriateness and adequacy of first line risk identification, assessments (i.e. KMORs, MCA (RCSA), scenario analyses, third party reviews)
- Where necessary, conduct independent second line operational risk assessments (e.g., reviewing control design and effectiveness of key processes, end‑to‑end deep dives of significant control breaks that impact multiple risk categories, lessons learned and near misses) and root cause assessments
- Create aggregated risk profile for the Business using a combination of first line and independent second line assessments.
- Evaluate the quality and execution of the Business control design and effectiveness assessments and drive…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).