Technology Risk and Compliance, AVP (Hybrid)

Citigroup Business Process Solutions Pte. Ltd.; Pateros; Hybrid; PHP 4,069,000 - 5,233,000; Full time

Job summary

A leading global financial services provider is seeking an Assistant Vice President for Technology Risk & Compliance in Pateros, Philippines. This role focuses on evaluating and managing technology and cyber risks and requires at least 6 years of experience in technology risk management. The position offers a hybrid working model and a comprehensive benefits package to support employee well-being and career development.

Benefits

Telehealth options

Paid parental leave

Learning and development resources

Generous paid time off packages

Volunteer opportunities

Qualifications

• Minimum of 6 years of experience in technology risk and/or cyber risk management.
• In-depth knowledge of Controls Testing principles.
• Familiarity with regulatory requirements and cyber security principles.

Responsibilities

• Evaluate technology and/or cyber risks to ensure compliance with acceptable risk appetite.
• Conduct regular technology and/or cyber risk assessments.
• Collaborate with business to understand its risk profile.

Skills

Controls Testing methodologies

Technology risk management

Cyber risk management

Information security

Education

Bachelor's degree or equivalent experience

Tools

CISA

CRISC

Job description

Discover your future at Citi

Working at Citi is far more than just a job. A career with us means joining a team of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Job Overview

Whether you’re at the start of your career or looking to discover your next adventure, your story begins here. At Citi, you’ll have the opportunity to expand your skills and make a difference at one of the world’s most global banks. We’re fully committed to supporting your growth and development from the start with extensive on-the-job training and exposure to senior leaders, as well as more traditional learning. You’ll also have the chance to give back and make a positive impact where we live and work through volunteerism.

Shape your Career with Citi

Citi’s Risk Management organization oversees risk-taking activities and assesses risks and issues independently of the front line units. We establish and maintain the enterprise risk management framework that ensures the ability to consistently identify, measure, monitor, control and report material aggregate risks.

We’re currently looking for a high caliber professional to join our team as Assistant Vice President, Technology Risk & Compliance - Hybrid (Internal Job Title: Cyber Tech 2nd LOD Sr. Analyst) based in Taguig, Philippines. Being part of our team means that we’ll provide you with the resources to meet your unique needs, empower you to make healthy decision and manage your financial well-being to help plan for your future.

Benefits include:

• Citi provides programs and services for your physical and mental well-being including access to telehealth options, health advocates, confidential counseling and more. Coverage varies by country.
• We believe all parents deserve time to adjust to parenthood and bond with the newest members of their families. That’s why in early 2020 we began rolling out our expanded Paid Parental Leave Policy to include Citi employees around the world.
• We empower our employees to manage their financial well-being and help them plan for the future.
• Citi provides access to an array of learning and development resources to help broaden and deepen your skills and knowledge as your career progresses.
• We have a variety of programs that help employees balance their work and life, including generous paid time off packages.
• We offer our employees resources and tools to volunteer in the communities in which they live and work. In 2019, Citi employee volunteers contributed more than 1 million volunteer hours around the world.

Individuals in Operational Risk establish and manage operational risk policies, propose strategies, and governance processes designed to minimize losses from inadequate controls, fraud, and potential bankruptcy. This includes supervision over technology operational risk, and cyber risk. These individuals are also responsible for the development of tools and infrastructure, using advanced analytical and statistical skills to identify policy gaps and recommend changes to current policies.

In this role, you’re expected to:

• Participate in initiatives to augment technology and/or cyber risk management practices and enhance organizational resilience.
• Support the development and implementation of technology and/or cyber risk management procedures and methodologies, including effective application within the businesses.
• Independently evaluate technology and/or cyber risks within the business to ensure they are within the acceptable risk appetite, taking proactive measures to address areas of concern.
• Collaborate with the business to understand its risk profile, evaluate technology and/or cyber risk exposure, incorporate risk mitigation practices, and monitor technology and cyber-related issues.
• Build and maintain effective engagement with the 1st Line of defense, understanding their needs, strategic priorities, challenges, & opportunities.
• Provide guidance on technology and/or cyber risk mitigation strategies and control enhancements to business and other stakeholders.
• Ensure technology and/or cyber risk management activities adhere to internal policies, external regulations, and industry standards.
• Partner with key stakeholders and subject matter experts across the organization to accomplish technology and/or cyber risk management goals.
• Provide consistent reporting to senior management and stakeholders on the status of technology and/or cyber assessments, detailing current risks and potential areas of concern.
• Analyze data to identify trends or emerging risks and provide timely recommendations to mitigate risk exposure.
• Conduct regular and comprehensive technology and/or cyber risk assessments, documenting findings and recommendations for reducing technology and cyber risk exposure.

As a successful candidate, you’d ideally have the following skills and exposure:

• Expertise and extensive experience in Controls Testing methodologies and execution
• In-depth knowledge of Controls Testing principle
• Relevant industry certifications (CISA, CRISC) would be of advantage
• Preferably with exposure or have worked within an auditing firm environment
• Previous experience supporting risk management, compliance, governance, or controls related roles.
• Minimum of 6 years experience in technology risk and/or cyber risk management, information security, IT or related field preferred.
• Familiarity with regulatory requirements, technology risk and/or cyber security principles, strategies and technologies.
• Understanding of IT systems, networks, cloud services, security infrastructure and system vulnerabilities.

Education:
Bachelor's/University degree or equivalent experience

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.