Ia Risk and Control Senior Manager

The IA Business Risk and Controls team is a newly created team within IA’s Chief Administrative Office (CAO) that will closely partner with Citi’s Global Business Risk and Control Office. This role reports directly to the IA Risk & Controls Director and is an exciting opportunity for someone with a keen interest to learn and make a difference.

The role will be responsible for executing a risk management framework to effectively identify, measure, monitor, and mitigate key risks for IA. Specifically:

- Enhance and maintain the IA inventory of processes, risks and controls (ARCM) and execute a risk and control self-assessment process for IA and partner with Citi auditors and audit-support teams on remediating the issues identified during the self-assessment process
- Develop and maintain the Material Risk Inventory (MRI) and interact with Enterprise and Operational Risk as appropriate
- Assist in successful execution of the quarterly Business Risk and Control Governance Committee (BRCC)

**Key Responsibilities**
- Inculcate risk and controls responsibilities within IA and act as an agent for ensuring a strong, global IA-owned risk and control culture, including driving continuous improvement.
- Lead execution of IA’s Annual Risk Assessment (ARA) process and the quarterly Manager’s Control Assessment (MCA) process across IA’s Assessment Units (AUs).
- Maintain and enhance the department’s MCA with regards to completeness, quality and mapping to regulatory requirements.
- Aggregate ARA results and determine enhancements required to be reflected in the MCA.
- Facilitate working sessions/discussions with Chief Auditors and audit-support teams to thoroughly vet issues identified through the MCA process.
- Aggregate issues identified through the MCA process and perform a root cause analysis to identify process or procedures changes needed.
- Support IA Leadership to monitor and effectively address control breaches identified through the MCA process.
- Facilitate and supervise activities to define the risk appetite for the inventory of key risks in IA and develop appropriate Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) to measure and monitor the risks against the appetite.
- Manage and maintain the Material Risk Inventory (MRI) and facilitate reporting to ORM for further aggregation into Top Risks for the firm.
- Conduct cross-IA thematic reviews and identify/share lessons learned to drive continuous improvement.
- Actively partner with the Issues Management team to ensure that deficient processes and areas are covered, and to ensure issues identified are tracked and monitored
- Oversee preparation of monthly, quarterly, annual (and ad-hoc) risk and control reporting to IA Leadership that identify overall control efficacy and areas of opportunity.
- Aggregate, analyze, validate meeting materials and coordinate appropriate reviews by IA Leadership prior to presentation to the BRCC.
- Oversee timely and effective tracking and execution of action items resulting from the BRCC.
- Ensure BRCC meetings inclusive of materials are conducted in adherence to the requirements of the BRCC Charter.
- Enable and support maintenance of high quality workpapers in alignment with Internal Audit methodology.
- Partner with IA Innovation to identify opportunities for automation and simplification of testing and monitoring activities.
- Liaise with other Global Functions, as necessary, and support connectivity and knowledge sharing.
- Participate in key Citi forums to receive updates on and provide inputs to risk and control programs, to share insights on emerging risks and escalate concerns impacting all control executive teams.
- Stay current on regulatory and industry updates and identify new emerging risks impacting IA. Assess impact of emerging risks to processes and controls.

**Qualifications**
- Deep knowledge of foundational elements of Internal Audit including understanding of key processes, risks and controls.
- Ability to understand and operate successfully in a complex, matrixed corporate environment.
- Sense of urgency, passion for results and personal accountability for achievement.
- Strong interpersonal, influencing, and communications skills with an ability to interact effectively with both direct reports and stakeholders.
- Meaningful knowledge of the risk management framework, including risk identification, risk appetite and strategy, risk-related decisions, processes and controls, risk analytics, governance and issue management.
- Demonstrated knowledge and experience with leading planning, execution, and reporting of testing and monitoring reviews; conducting a risk assessment, and preparing impactful leadership reporting.
- Knowledge and understanding of strategic elements of financial, operational, technical, and regulatory environment across the company.
- Demonstrated excellence at identifying stakeholders, understanding needs, and driving decision
- making/resolution in a coll