Technology Risk and Compliance, AVP (Hybrid)

Citigroup Inc.; Taguig; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Job summary

A leading global bank is seeking an Assistant Vice President, Technology Risk & Compliance to oversee technology operational risks in Taguig, Philippines. This role includes evaluating risks, developing risk management strategies, and providing reporting to senior management. Ideal candidates will have at least 6 years of experience in technology risk management and relevant certifications. The role offers extensive training, a hybrid work environment, and strong community engagement opportunities.

Benefits

Paid parental leave

Health and wellness programs

Learning and development resources

Paid time off packages

Qualifications

• Minimum of 6 years experience in technology risk and/or cyber risk management.
• In-depth knowledge of controls testing principles.
• Relevant industry certifications (CISA, CRISC) would be advantageous.

Responsibilities

• Participate in initiatives to augment technology and/or cyber risk management practices.
• Evaluate technology and/or cyber risks within the business.
• Report to senior management on the status of technology and/or cyber assessments.

Skills

Controls testing methodologies

Risk management

Interpersonal skills

Problem-solving mindset

Project management

Education

Bachelor’s/University degree or equivalent experience

Tools

Risk reporting tools

Job description

Whether you’re at the start of your career or looking to discover your next adventure, your story begins here. At Citi, you’ll have the opportunity to expand your skills and make a difference at one of the world’s most global banks. We’re fully committed to supporting your growth and development from the start with extensive on-the-job training and exposure to senior leaders, as well as more traditional learning. You’ll also have the chance to give back and make a positive impact where we live and work through volunteerism.

Shape your Career with Citi

Citi’s Risk Management organization oversees risk-taking activities and assesses risks and issues independently of the front line units. We establish and maintain the enterprise risk management framework that ensures the ability to consistently identify, measure, monitor, control and report material aggregate risks.

We’re currently looking for a high caliber professional to join our team as Assistant Vice President, Technology Risk & Compliance - Hybrid (Internal Job Title: Cyber Tech 2nd LOD Sr. Analyst) based in Taguig, Philippines. Being part of our team means that we’ll provide you with the resources to meet your unique needs, empower you to make healthy decision and manage your financial well-being to help plan for your future.

• Citi provides programs and services for your physical and mental well-being including access to telehealth options, health advocates, confidential counseling and more. Coverage varies by country.

• We believe all parents deserve time to adjust to parenthood and bond with the newest members of their families. That’s why in early 2020 we began rolling out our expanded Paid Parental Leave Policy to include Citi employees around the world.

• We empower our employees to manage their financial well-being and help them plan for the future.

• Citi provides access to an array of learning and development resources to help broaden and deepen your skills and knowledge as your career progresses.

• We have a variety of programs that help employees balance their work and life, including generous paid time off packages.

• We offer our employees resources and tools to volunteer in the communities in which they live and work. In 2019, Citi employee volunteers contributed more than 1 million volunteer hours around the world.

Overview of the role

Operational Risk roles involve establishing and managing policies, governance processes and tools to minimize losses from inadequate controls, fraud, and potential bankruptcy. This includes supervision over technology operational risk and cyber risk. The role also covers development of tools and infrastructure using analytics to identify policy gaps and recommend changes to current policies. This role protects the company’s financial stability and reputation and contributes to overall business resilience and success.

In this role, you’re expected to:

• Participate in initiatives to augment technology and/or cyber risk management practices and enhance organizational resilience.
• Support the development and implementation of technology and/or cyber risk management procedures and methodologies, including effective application within the businesses.
• Independently evaluate technology and/or cyber risks within the business to ensure they are within the acceptable risk appetite, taking proactive measures to address areas of concern.
• Collaborate with the business to understand its risk profile, evaluate technology and/or cyber risk exposure, incorporate risk mitigation practices, and monitor technology and cyber-related issues.
• Build and maintain effective engagement with the 1st Line of defense, understanding their needs, strategic priorities, challenges, & opportunities.
• Provide guidance on technology and/or cyber risk mitigation strategies and control enhancements to business and other stakeholders.
• Ensure technology and/or cyber risk management activities adhere to internal policies, external regulations, and industry standards.
• Partner with key stakeholders and subject matter experts across the organization to accomplish technology and/or cyber risk management goals.
• Provide consistent reporting to senior management and stakeholders on the status of technology and/or cyber assessments, detailing current risks and potential areas of concern.
• Analyze data to identify trends or emerging risks and provide timely recommendations to mitigate risk exposure.
• Conduct regular and comprehensive technology and/or cyber risk assessments, documenting findings and recommendations for reducing technology and cyber risk exposure.
• Be an enthusiastic and early adopter of change; take ownership for helping others see a better future and stay positive during uncertainty.
• Demonstrate curiosity in seeking new ways to overcome challenges; apply learning from failures.
• Encourage diverse ideas to improve outcomes and communicate alternative views respectfully.
• Act as a catalyst for change by identifying and helping others see where new ideas could benefit the organization.
• Understand and align with organizational decisions; help others prioritize team and enterprise success over personal agenda.
• Focus on high-priority work aligned to business goals; help others manage competing priorities.
• Identify opportunities to streamline work and create process improvements for efficiency.
• Takes personal accountability for escalating, identifying, and managing potential risk; implement controls that enhance the client experience and operational effectiveness.
• Anticipate problems and proactively identify solutions addressing root causes for meaningful improvements.
• Set high expectations and invest the necessary effort to deliver excellence and exceed performance goals.
• Model and promote ethical behavior and client-first decision making in all situations.
• Engage stakeholders early and often to improve collaboration in achieving common goals.
• Volunteer in Citi programs that support the community and advocate for solutions meeting client and community needs.
• Promote balance, well-being, and development for colleagues and leverage diverse networks to recruit diverse talent.
• Listen empathetically and consider others’ positions before acting; amplify voices that are underrepresented.
• Assess risk when business decisions are made, safeguarding Citigroup, its clients and assets by complying with laws and regulations and escalating control issues with transparency.

As a successful candidate, you’d ideally have the following skills and exposure:

• Expertise and extensive experience in controls testing methodologies and execution
• In-depth knowledge of controls testing principles
• Relevant industry certifications (CISA, CRISC) would be advantageous
• Experience in an auditing firm environment is preferred
• Previous experience supporting risk management, compliance, governance, or controls roles
• Minimum of 6 years experience in technology risk and/or cyber risk management, information security, IT or related field preferred
• Familiarity with regulatory requirements, technology risk and/or cyber security principles, strategies and technologies
• Understanding of IT systems, networks, cloud services, security infrastructure and system vulnerabilities
• Demonstrated experience in the risk management lifecycle
• Exposure to enterprise risk management frameworks and risk reporting tools and techniques
• Understanding of technology risk and/or cyber risk concepts, methodologies and tools
• Ability to exercise independence of judgment and autonomy
• Strong project management and organizational skills; ability to prioritize tasks and manage multiple initiatives in a fast-paced environment
• Strong interpersonal skills to network, build relationships and collaborate with cross-functional teams
• Ability to analyze data to identify trends and emerging risks
• Problem-solving mindset with the ability to recommend practical solutions and make sound decisions under pressure
• High level of integrity and professionalism in handling sensitive information

Education: Bachelor’s/University degree or equivalent experience

Working at Citi is far more than just a job. A career with us means joining a family of more than 230,000 dedicated people from around the globe. At Citi, you’ll have the opportunity to grow your career, give back to your community and make a real impact.

Take the next step in your career, apply for this role at Citi today This role is open to applicants in Taguig, Philippines. Note: Citi is an equal opportunity employer and qualified candidates will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law. Citi is committed to accessibility and reasonable accommodations during the recruitment process. If you require accommodations, please review the Accessibility at Citi information during the application process.