Operational Risk Head of Data Risk Center of Excellence - C16 - TAMPA

Citi•Tampa, FL

About The Position

Control objectives and standards: Ensure Enterprise Control Standard and controls design requirements are clearly articulated and implemented consistently across Business and Function coverage teams Strategic decision making: Oversee that Data Risk Management practices, insights and tools are consistently embedded in day-to-day business processes and strategic decision-making of Business and Function coverage teams to enable proactive issue identification and comprehensive remediation. Transformation: In addition to overseeing the compliance against ORM frameworks, Data Risk Management has the added complexity of overseeing the effective execution of the Enterprise Data transformation. This transformation cuts across the enterprise and is multi-disciplinary in nature. In light of this, a “Hub and Spoke” approach is being adopted as ORM's oversight operating model. Under this approach, this role will face off with 1LoD enterprise data roles and will work closely with Business/Region/LV Global Op Risk Officers and other relevant independent risk functions in dispensing the appropriate key second Line of defense (2LOD) risk oversight responsibilities to ensure well- coordinated risk assessments, risk identification, measurement/monitoring and timely remediation of key gaps, including appropriate enterprise-level aggregation aligned with defined target state of Data Transformation. To execute these requirements this individual will lead Data Risk SWAT teams in the identification and execution of independent second-line risk assessments in coordination with other ORM teams (e.g., leading use case challenges) leveraging the hub-and-spoke model. Ensure the Data Risk concepts and skills are transferred to the ORM coverage teams as part of the SWAT team embedding. Lead a program management/coordination function, ensuring that coordination efforts needed in the hub-and-spoke approach are delivered (e.g., group-wide work intake & planning, execution monitoring). Negotiate and remediate resulting risk and control concerns identified. Operate a shared services function delivering data risk SME framework activities, supporting business/function risk management functions firm-wide. Escalate significant or unaddressed risk issues and control environment concerns to appropriate governance forums and Risk leadership. As needed, serve as the primary interface to key stakeholders such as regulators, senior management, and the Board, as it relates to 2LOD assessment/point of view for the Risk Category. Broad experience in risk management, including a successful track record of managing large, complex, enterprise-wide risk management programs at a large financial services organization. Demonstrated success in leading by influence in complex organizations. Deep subject matter expertise in Non-Financial Risk Management with a proven risk and control track record in technology, data, and/or reporting risk. Track record of managing internal relationships and partnering with a range of stakeholders (e.g., business, functions) in leading sustained change and change management efforts. Strong technical problem-solving skills and an ability to identify conflicts, discrepancies, and other issues, and bring together the right team to solve them. Well-developed listening skills and a strong ability to communicate and engage at the senior management level, both orally and in writing. Ability to constructively challenge others at all levels and across boundaries to deliver better results. Continuous improvement mind-set to solve for root causes, assess the impact of actions and adjust as needed; simplify and standardize at every opportunity. Regulatory engagement experience. 20+ years of direct experience as a senior Non-Financial Risk professional (e.g. data, technology, or reporting risk) or relevant 1LOD role in a large financial services organization. Extensive experience in overseeing highly visible, complex initiatives related to global data programs in a large-scale, distributed organization. Extensive experience applying operational risk management frameworks in a global organization. Strong track record in leading teams to deliver technical risk and control assessments and negotiate outcomes at scale. Demonstrable understanding of Data fundamentals, including Data architecture, Data principles, and a deep appreciation of intersectionality and interdependency with enterprise Technology and systems architecture. Strong working knowledge of scalable data platforms and cloud capabilities that are secure, resilient, and compliant with relevant regulations. Deep knowledge of financial and risk data, along with an understanding of regulatory, compliance, risk management, and financial management concerns. Subject matter expertise in operational risk management as applied to Data risk. Bachelor's degree in Computer Science, Data Science, Information Technology, Business, or a related field are preferred. Analytical Thinking, Control Monitoring, Credible Challenge, Governance, Issue Management, Operational Risk, Policy and Procedure, Policy and Regulation, Risk Controls and Monitors, Risk Identification and Assessment.

Requirements

Broad experience in risk management, including a successful track record of managing large, complex, enterprise-wide risk management programs at a large financial services organization.
Demonstrated success in leading by influence in complex organizations.
Deep subject matter expertise in Non-Financial Risk Management with a proven risk and control track record in technology, data, and/or reporting risk.
Track record of managing internal relationships and partnering with a range of stakeholders (e.g., business, functions) in leading sustained change and change management efforts.
Strong technical problem-solving skills and an ability to identify conflicts, discrepancies, and other issues, and bring together the right team to solve them.
Well-developed listening skills and a strong ability to communicate and engage at the senior management level, both orally and in writing.
Ability to constructively challenge others at all levels and across boundaries to deliver better results.
Continuous improvement mind-set to solve for root causes, assess the impact of actions and adjust as needed; simplify and standardize at every opportunity.
Regulatory engagement experience.
20+ years of direct experience as a senior Non-Financial Risk professional (e.g. data, technology, or reporting risk) or relevant 1LOD role in a large financial services organization.
Extensive experience in overseeing highly visible, complex initiatives related to global data programs in a large-scale, distributed organization.
Extensive experience applying operational risk management frameworks in a global organization.
Strong track record in leading teams to deliver technical risk and control assessments and negotiate outcomes at scale.
Demonstrable understanding of Data fundamentals, including Data architecture, Data principles, and a deep appreciation of intersectionality and interdependency with enterprise Technology and systems architecture.
Strong working knowledge of scalable data platforms and cloud capabilities that are secure, resilient, and compliant with relevant regulations.
Deep knowledge of financial and risk data, along with an understanding of regulatory, compliance, risk management, and financial management concerns.
Subject matter expertise in operational risk management as applied to Data risk.
Analytical Thinking, Control Monitoring, Credible Challenge, Governance, Issue Management, Operational Risk, Policy and Procedure, Policy and Regulation, Risk Controls and Monitors, Risk Identification and Assessment.

Nice To Haves

Bachelor's degree in Computer Science, Data Science, Information Technology, Business, or a related field are preferred.

Responsibilities

Ensure Enterprise Control Standard and controls design requirements are clearly articulated and implemented consistently across Business and Function coverage teams
Oversee that Data Risk Management practices, insights and tools are consistently embedded in day-to-day business processes and strategic decision-making of Business and Function coverage teams to enable proactive issue identification and comprehensive remediation.
Overseeing the effective execution of the Enterprise Data transformation.
Work closely with Business/Region/LV Global Op Risk Officers and other relevant independent risk functions in dispensing the appropriate key second Line of defense (2LOD) risk oversight responsibilities to ensure well- coordinated risk assessments, risk identification, measurement/monitoring and timely remediation of key gaps, including appropriate enterprise-level aggregation aligned with defined target state of Data Transformation.
Lead Data Risk SWAT teams in the identification and execution of independent second-line risk assessments in coordination with other ORM teams (e.g., leading use case challenges) leveraging the hub-and-spoke model.
Ensure the Data Risk concepts and skills are transferred to the ORM coverage teams as part of the SWAT team embedding.
Lead a program management/coordination function, ensuring that coordination efforts needed in the hub-and-spoke approach are delivered (e.g., group-wide work intake & planning, execution monitoring).
Negotiate and remediate resulting risk and control concerns identified.
Operate a shared services function delivering data risk SME framework activities, supporting business/function risk management functions firm-wide.
Escalate significant or unaddressed risk issues and control environment concerns to appropriate governance forums and Risk leadership.
Serve as the primary interface to key stakeholders such as regulators, senior management, and the Board, as it relates to 2LOD assessment/point of view for the Risk Category.