Technology Business Risk Group Manager

**Responsibilities**:

- Be responsible for managing and supporting multiple risk and control programs for the organization including working with the global CISO Risk team to define the strategy, approach, processes, quality, tools and reporting that provide APAC risk management consistency and excellence within CISO.
- Accountable for management of complex/critical/large professional disciplinary areas, including leading and directing a team of professionals.
- Generally accountable for delivery of a full range of services to one or more businesses/ geographic regions.
- Ensure that emerging risks identified are socialized with key stakeholders and mitigation strategies are in place.
- Identify areas of engagement based on level of investment, inherent risk, complexity of change and other risk factors
- Execute Risk Control coverage strategy, ensure appropriate risk mitigation actions are in place and escalate to senior management as appropriate
- Provide supervision of Risk Control team's efforts and assist with prioritizing and addressing roadblocks encountered
- Identify and assign key metrics (e.g. KRI/KPIs) to support effective monitoring and management of operational risk including controls assurance and ensure issues identified and corrective actions are raised to address gaps.
- Provide strong oversight of CAP (Corrective Action Plan) remediation activities both for audit and control issues including quality completion of Risk Exception documentation and annual renewals. Support the assigned technology platform re ensuring the remediation of corrective actions relating to both self-identified and audit issues are completed on time and with the appropriate level of quality and adherence to IBAM.
- Support assigned technology platform during internal and external audits. Assist in all interactions with audit including deliverables management, audit fieldwork, business monitoring and meetings.
- Leverage reporting to identify trends, themes and areas requiring improved controls
- Drive Manager's Control Assessment monitoring, quarterly approvals and improvements required
- Complete all tasks in connection with the organization’s activity but not detailed in the current job description, assigned by the direct manager, supervisor, or the functional head.
- Travel may be required as part of risk and control activities.

**Ideal Background**
- 10+ years’ experience in Risk and people management
- Demonstrable Information Security Risk knowledge based on working in real-world environments & situations.
- Excellent communication skills required in order to negotiate internally, often at a senior level. Some external communication may be necessary.
- Full management responsibility of a team or multiple teams.
- ** Education**:

- Bachelor’s/University degree or equivalent experience, potentially Master’s degree
- Relevant professional qualifications with Risk / Security management.

**Benefits**
- Opportunity to widen your knowledge of technology risk area in global financial services organization
- Long-term career path across geographies and business lines
- Friendly work atmosphere
- Competitive compensation package
- Flexible work arrangements
- **Job Family Group**:
Technology
- **Job Family**:
Information Security
- **Time Type**:
Full time
- Citi is an equal opportunity and affirmative action employer.

Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

View the "**EEO is the Law**" poster. View the **EEO is the Law Supplement**.

View the **EEO Policy Statement**.

View the **Pay Transparency Posting