Technology & Cyber Risk Lead Analyst, Vice President

Citi’s Risk Management organization oversees risk-taking activities and assesses risks and issues independently of the front-line units. We establish and maintain the enterprise risk management framework that ensures the ability to consistently identify, measure, monitor, control and report material aggregate risks.

We’re currently looking for a high caliber professional to join our team as Technology & Cyber Risk Group Manager, India Lead - Senior Vice President (Internal Job Title): Technology & Cyber Risk Group Manager, India Lead – C14 based in Mumbai, India. Being part of our team means that we’ll provide you with the resources to meet your unique needs, empower you to make healthy decisions and manage your financial well-being to help plan for your future. For instance:

• •Citi provides programs and services for your physical and mental well-being including access to telehealth options, health advocates, confidential counseling and more. Coverage varies by country.
• •We believe all parents deserve time to adjust to parenthood and bond with the newest members of their families. That’s why in early 2020 we began rolling out our expanded Paid Parental Leave Policy to include Citi employees around the world.
• •We empower our employees to manage their financial well-being and help them plan for the future.
• •Citi provides access to an array of learning and development resources to help broaden and deepen your skills and knowledge as your career progresses.
• •We have a variety of programs that help employees balance their work and life, including generous paid time off packages.
• •We offer our employees resources and tools to volunteer in the communities in which they live and work. In 2019, Citi employee volunteers contributed more than 1 million volunteer hours around the world

Individuals in Operational Risk establish and manage operational risk policies, propose strategies, and governance processes designed to minimize losses from inadequate controls, fraud, and potential bankruptcy. This includes supervision over technology operational risk, cyber risk, and fraud risk. These individuals are also responsible for the development of tools and infrastructure that support fraud monitoring and prevention, using advanced analytical and statistical skills to identify policy gaps and recommend changes to current policies. This role is crucial to the company as it fortifies against potential operational risks, thereby protecting the company's financial stability and reputation, and contributing towards the overall business resilience and success.

In this role, you’re expected to :

• •Support the development and implementation of enterprise technology and/or cyber risk management procedures and methodologies, monitoring their effective application within the business.
• •Review and challenge the effectiveness of risk mitigation strategies and control measures implemented by the 1st line of defense.
• •Independently assess technology and/or cyber risks within the business to ensure they are within the acceptable risk appetite, identifying any potential areas of vulnerability.
• •Collaborate with the business to understand its risk profile, evaluate technology and/or cyber risk exposure, incorporate risk mitigation strategies, and monitor technology and cyber-related issues.
• •Provide guidance on technology and/or cyber risk mitigation strategies and control enhancements to business and other stakeholders.
• •Provide regular and detailed reports to senior management and stakeholders on the status of technology and/or cyber risks.
• •Analyze data to identify trends or emerging technology and cyber risks and provide timely recommendations to mitigate risk exposure.
• •Lead initiatives to enhance risk management practices, contributing to overall organizational resilience and readiness against potential technology and/or cyber risks.
• •Ensure all technology and/or cyber risk management activities comply with internal policies, external regulations, and industry standards.
• •Stay updated on regulatory changes and industry best practices to assess its impact on technology and/or cyber risk management and advise the business accordingly.
• •Support the execution of remediation with timely and effective outcomes against regulatory expectations.
• •Promote a culture of risk awareness and accountability in the business, escalating any technology and/or cyber risks as appropriate and collaborating with stakeholders to establish preventive measures.
• •Support independent oversight and assurance over the bank’s broader operational risk management frameworks, ensuring compliance with regulatory requirements and internal policies.
• •Is an enthusiastic and early adopter of change; takes ownership for helping others see a better future and stay positive during uncertainty.
• •Demonstrates and inspires curiosity in seeking new ways to overcome challenges; actively applies learning from failures.
• •Challenges self and others to seek out and communicate alternative views even when unpopular; welcomes diverse ideas to improve outcomes.
• •Acts as a catalyst for change by identifying and helping others see where new ideas could benefit the organization.
• •Proactively seeks to understand and act in alignment with organizational decisions; helps others prioritize team and enterprise success over their own personal agenda.
• •Focuses on highest-priority work aligned to business goals; helps others effectively manage competing priorities.
• •Proactively identifies opportunities to streamline work; creates process improvements that enhance efficiency for self and the team.
• •Takes personal accountability for escalating, identifying, and managing potential risk; implements controls that enhance the client experience and operational effectiveness.
• •Anticipates problems and proactively identifies solutions that address the root causes and result in meaningful improvements.
• •Sets high expectations and invests the necessary effort to deliver excellence and exceed performance goals.
• •Role-models and helps others to do the right thing for clients and Citi in all situations, even when difficult.
• •Engages key stakeholders early and often and actively looks for opportunities to improve collaboration in achieving common goals.
• •Proactively seeks out opportunities to volunteer in Citi programs that support the community; advocates for solutions that meet the needs of Citi’s clients and the community.
• •Enthusiastically promotes the unique needs and preferences of colleagues; makes active commitment to help colleagues achieve balance, well-being, and development.
• •Leverages varied networks to recruit diverse talent; advocates for colleagues with diverse skillsets, styles, and experiences to gain career opportunities.
• •Empathetically listens and understands others’ positions before acting on issues; works to amplify voices that are minimized in the workplace.

As a successful candidate, you’d ideally have the following skills and exposure :

• •Previous experience supporting risk management, compliance, governance, or controls related roles.
• •Minimum of 8 years experience in technology risk and/or cyber risk management, information security, information technology or related field
• •Understanding of various technology risk and/or cyber principles, strategies, and technologies, including proficiency in areas such as data protection, network security, threat analysis, identity and access management, incident response, and security architecture.
• •Demonstrated track record of effectively assessing and managing competing priorities.
• •Familiarity with regulatory requirements and standards related to technology risk and/or cyber risk.
• •Exposure to enterprise risk management frameworks and knowledge of risk reporting tools and techniques.
• •Understanding of different risk types, e.g. credit, market, liquidity.
• •Ability to interact effectively at all levels, develop strong partnerships across the organ