Senior Vice President - Data Risk Officer, Risk Appetite Planning, Metrics and Analysis –Risk

Operational Risk Management (ORM) is an enterprise-level independent risk management function responsible for enterprise-wide oversight and aggregation of operational risk. Its mandate covers all business lines (US Personal Banking, Global Wealth Management, Markets, Services, Banking, Global Functions & EO&T) spanning all geographies. The ORM function oversees the design and implementation of the non-financial risk management framework. Key objectives of the data risk management framework include:

• Operating model, staffing, and culture
• Operational risk appetite
• Control objectives and standards
• Operational risk and control assessments and reporting
• Strategic decision-making
• The effective execution of Citi's Enterprise Data transformation

Because Citi's Enterprise Data transformation cuts across the enterprise and is multi-disciplinary in nature, ORM's oversight for data risk management at Citi relies upon a “Hub and Spoke” approach, incorporating the second line of defense (2

LOD) Business/Region/LV Global Op Risk Officers and other relevant independent risk functions. These teams work collectively to dispense appropriate risk oversight responsibilities, ensuring well-coordinated risk assessments, risk identification, measurement/monitoring, and timely remediation of key gaps. Furthermore, the ORM Data Risk team delivers an enterprise-level aggregation of risk oversight outcomes to assess the firm's progress toward the Data Transformation target state.

• Support the primary oversight of the firm's Data Risk Appetite, including assessment of factors of risk, assessing and monitoring "path-to-green" efforts, and managing metrics that measure risk and associated analysis.
• Work collaboratively with 1
  
  LOD teams to support the definition of clear "path-to-green" strategies and assist in driving the execution of agreed plans.
• Contribute to identifying and executing independent second-line risk assessments, in coordination with other ORM teams where needed (e.g., contributing to challenges of specific risk appetite metrics) to meet internal commitments, leveraging the hub-and-spoke model.
• Participate in internal knowledge sharing initiatives related to Data Risk Appetite efforts.
• Help ensure that this multidisciplinary and cross-cutting risk area is well understood and that the implications of firm-wide remediation efforts are understood in terms of "path-to-green" efforts.
• Assist in the negotiation and remediation of identified risk and control concerns.
• Prepare materials for escalation of significant or unaddressed risk issues and control environment concerns to appropriate governance forums and Risk leadership.
• As needed, support the primary interface to key stakeholders such as regulators, senior management, and the Board, as it relates to 2
  
  LOD assessment/point of view for the Risk Category.
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of teams and create accountability with those who fail to maintain these standards.

• Experience:
  
  7-10 years of direct experience in a non-financial risk (data, technology, or reporting risk) or relevant 1
  
  LOD function within a financial services organization.
• Risk Management Knowledge:
  Experience in assessing risk appetite for non-financial risks aligned with regulatory expectations. Proficient in risk assessment principles and supervisory expectations in terms of the quantity and quality of operational risk management.
• Data Fundamentals:
  Demonstrable understanding of Data Management fundamentals, including Data architecture, Data principles, and a deep appreciation of intersectionality and interdependency with enterprise Technology and systems architecture.
• Analytical
  
  Skills:
  
  Strong technical problem-solving and analytical skills…