Technology & Cyber Risk Lead Analyst, Vice President

Citi; Mumbai; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Citi is seeking a Technology & Cyber Lead Analyst - Vice President in Mumbai to drive risk management practices across technology and cyber domains. The role emphasizes independent risk assessment, collaboration with the business, and advising on mitigation strategies to strengthen the bank's resilience.

Ideal candidates will have extensive experience in technology risk, regulatory knowledge, and the ability to influence senior management while guiding defense strategies and ensuring compliant

Qualifications

• Experience in technology risk and/or cyber risk management preferred.
• Understanding of data protection, security architecture and incident response.
• Ability to interact at all levels and challenge effectively.

Responsibilities

• Support the development and implementation of enterprise technology and/or cyber risk management procedures.
• Review effectiveness of risk mitigation strategies and controls by the 1st line of defense.
• Independently assess tech/cyber risks to ensure alignment with risk appetite.
• Collaborate with businesses to understand risk profiles and monitor tech/cyber issues.
• Provide guidance on risk mitigation strategies and control enhancements to stakeholders.
• Deliver regular, detailed risk reports to senior management.

Skills

Risk management

Regulatory compliance

Governance

Controls

Stakeholder management

Analytical thinking

Education

Bachelor's/University degree

Master's degree preferred

Job description

Citi’s Risk Management organization oversees risk-taking activities and assesses risks and issues independently of the front-line units. We establish and maintain the enterprise risk management framework that ensures the ability to consistently identify, measure, monitor, control and report material aggregate risks.

We’re currently looking for a high caliber professional to join our team as Technology & Cyber Lead Analyst - Vice President (Internal Job Title): Technology & Cyber Lead Analyst - Vice President – C13 based in Mumbai, India. Being part of our team means that we’ll provide you with the resources to meet your unique needs, empower you to make healthy decisions and manage your financial well-being to help plan for your future. For instance:

• Citi provides programs and services for your physical and mental well-being including access to telehealth options, health advocates, confidential counseling and more. Coverage varies by country.
• We believe all parents deserve time to adjust to parenthood and bond with the newest members of their families. That’s why in early 2020 we began rolling out our expanded Paid Parental Leave Policy to include Citi employees around the world.
• We empower our employees to manage their financial well-being and help them plan for the future.
• Citi provides access to an array of learning and development resources to help broaden and deepen your skills and knowledge as your career progresses.
• We have a variety of programs that help employees balance their work and life, including generous paid time off packages.
• We offer our employees resources and tools to volunteer in the communities in which they live and work. In 2019, Citi employee volunteers contributed more than 1 million volunteer hours around the world

Individuals in Operational Risk establish and manage operational risk policies, propose strategies, and governance processes designed to minimize losses from inadequate controls, fraud, and potential bankruptcy. This includes supervision over technology operational risk, cyber risk, and fraud risk. These individuals are also responsible for the development of tools and infrastructure that support fraud monitoring and prevention, using advanced analytical and statistical skills to identify policy gaps and recommend changes to current policies. This role is crucial to the company as it fortifies against potential operational risks, thereby protecting the company's financial stability and reputation, and contributing towards the overall business resilience and success.

In this role, you’re expected to :

• Support the development and implementation of enterprise technology and/or cyber risk management procedures and methodologies, monitoring their effective application within the business.
• Review and challenge the effectiveness of risk mitigation strategies and control measures implemented by the 1st line of defense.
• Independently assess technology and/or cyber risks within the business to ensure they are within the acceptable risk appetite, identifying any potential areas of vulnerability.
• Collaborate with the business to understand its risk profile, evaluate technology and/or cyber risk exposure, incorporate risk mitigation strategies, and monitor technology and cyber-related issues.
• Provide guidance on technology and/or cyber risk mitigation strategies and control enhancements to business and other stakeholders.
• Provide regular and detailed reports to senior management and stakeholders on the status of technology and/or cyber risks.
• Analyze data to identify trends or emerging technology and cyber risks and provide timely recommendations to mitigate risk exposure.
• Lead initiatives to enhance risk management practices, contributing to overall organizational resilience and readiness against potential technology and/or cyber risks.
• Ensure all technology and/or cyber risk management activities comply with internal policies, external regulations, and industry standards.
• Stay updated on regulatory changes and industry best practices to assess its impact on technology and/or cyber risk management and advise the business accordingly.
• Support the execution of remediation with timely and effective outcomes against regulatory expectations.
• Promote a culture of risk awareness and accountability in the business, escalating any technology and/or cyber risks as appropriate and collaborating with stakeholders to establish preventive measures.
• Support independent oversight and assurance over the bank’s broader operational risk management frameworks, ensuring compliance with regulatory requirements and internal policies.
• Is an enthusiastic and early adopter of change; takes ownership for helping others see a better future and stay positive during uncertainty.
• Demonstrates and inspires curiosity in seeking new ways to overcome challenges; actively applies learning from failures.
• Challenges self and others to seek out and communicate alternative views even when unpopular; welcomes diverse ideas to improve outcomes.
• Acts as a catalyst for change by identifying and helping others see where new ideas could benefit the organization.
• Proactively seeks to understand and act in alignment with organizational decisions; helps others prioritize team and enterprise success over their own personal agenda.
• Focuses on highest-priority work aligned to business goals; helps others effectively manage competing priorities.
• Proactively identifies opportunities to streamline work; creates process improvements that enhance efficiency for self and the team.
• Takes personal accountability for escalating, identifying, and managing potential risk; implements controls that enhance the client experience and operational effectiveness.
• Anticipates problems and proactively identifies solutions that address the root causes and result in meaningful improvements.
• Sets high expectations and invests the necessary effort to deliver excellence and exceed performance goals.
• Role-models and helps others to do the right thing for clients and Citi in all situations, even when difficult.
• Engages key stakeholders early and often and actively looks for opportunities to improve collaboration in achieving common goals.
• Proactively seeks out opportunities to volunteer in Citi programs that support the community; advocates for solutions that meet the needs of Citi’s clients and the community.
• Enthusiastically promotes the unique needs and preferences of colleagues; makes active commitment to help colleagues achieve balance, well-being, and development.
• Leverages varied networks to recruit diverse talent; advocates for colleagues with diverse skillsets, styles, and experiences to gain career opportunities.
• Empathetically listens and understands others’ positions before acting on issues; works to amplify voices that are minimized in the workplace.

As a successful candidate, you’d ideally have the following skills and exposure:

• Previous experience supporting risk management, compliance, governance, or controls related roles.
• Minimum of 8 years experience in technology risk and/or cyber risk management, information security, information technology or related field
• Understanding of various technology risk and/or cyber principles, strategies, and technologies, including proficiency in areas such as data protection, network security, threat analysis, identity and access management, incident response, and security architecture.
• Demonstrated track record of effectively assessing and managing competing priorities.
• Familiarity with regulatory requirements and standards related to technology risk and/or cyber risk.
• Exposure to enterprise risk management frameworks and knowledge of risk reporting tools and techniques.
• Understanding of different risk types, e.g. credit, market, liquidity.
• Ability to interact effectively at all levels, develop strong partnerships across the organization, and present complex information clearly to senior management and stakeholders.
• Strong influencer with a focus on building relationships with the 1st line, while remaining independent and retaining the ability to challenge effectively.
• Comfortable in dynamic environments, capable of adapting to change while maintaining focus on risk management objectives.
• Strong stakeholder management skills, with the ability to understand drivers and overcome barriers.
• High level of integrity and professionalism, with the ability to handle sensitive and confidential information appropriately.
• Analytical, with the ability to comprehend complexity and engage strategically, analyzing and interpreting large volumes of data.

Education:
Bachelor's/University degree, Master's degree preferred

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Job Family Group

Risk Management

Job Family

Operational Risk

Time Type

Full time

Most Relevant Skills

Analytical Thinking, Controls Lifecycle, Credible Challenge, Governance, Policy, Procedure, and Regulation, Risk Management Lifecycle.

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.