Head of Operational Risk Management

Citi•New York, NY

About The Position

The Citi Head of Operational Risk Management (ORM) reports to the Chief Risk Officer of Citi and is responsible for Operational Risk Management at the enterprise-level. ORM is an independent risk function responsible for firm‑wide oversight and aggregation of operational risk across all businesses and geographies. The leader in this role oversees the design and execution of Citi’s non‑financial risk management framework. Core Objectives: Operating Model, Staffing & Culture: Ensure a clear, consistent lines‑of‑defense model, supported by sufficient expertise, accountability, and training to effectively manage operational risk. Operational Risk Appetite: Define and maintain risk appetite aligned to critical business outcomes across business, country, and entity levels. Control Objectives & Standards: Maintain clear control standards and requirements at the appropriate risk category level to ensure effective, consistent control design. Assessments & Reporting: Oversee fit‑for-purpose MCA and complementary assessments (scenario analysis, category-specific assessments, lessons learned), with clear, thematic reporting. Strategic Decision-Making Integration: Embed risk insights, tools, and practices into day‑to-day business processes and strategic decisions for proactive issue identification. Optimization: The Head of ORM leads continuous improvement across all businesses, streamlining processes, automating routine tasks, and implementing data-driven, technology-enabled solutions.

Requirements

Broad enterprise risk management experience at large financial institutions, with subject‑matter expertise across relevant operational risk stripes
Deep understanding of Citi’s products, services, and the downstream impacts of risk decisions.
Knowledge of global regulatory environments, cyber risk, third‑party risk, fraud, and IT/operations developments.
Demonstrated success transforming risk management using technology and innovative methodologies.
Experience leading a best‑in-class risk organization recognized for excellence in operational and technology risk management.
Strong ability to partner with business leaders and regulators with constructive dialogue.
Proven leadership in change management, guiding teams through dynamic environments.

Responsibilities

Simplification of Frameworks Refine governance, policies, and practices to drive clarity and ease of adoption, including optimization of the Manager Control Assessment and workflows for fraud and electronic trading risks.
Automation & Digitalization Deploy automation to reduce manual processes in risk identification, measurement, and controls. Enhance dashboards and strengthen oversight of technology and cyber risks using intelligence-driven tools.
AI & Advanced Analytics Integration Implement predictive analytics, machine learning, and AI to better detect, predict, and analyze operational risk events, improving preventive capabilities.
Change Leadership & Strategic Influence Lead the organization through technological and procedural change by equipping teams, adapting processes and reduce losses.
Talent Management Attract, develop, and retain top talent with proven leadership capabilities
Regulatory Engagement Engage effectively with regulators on all operational risk matters

Benefits

In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards.
Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs.
Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays.
For additional information regarding Citi employee benefits, please visit citibenefits.com.
Available offerings may vary by jurisdiction, job level, and date of hire.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume