Business Risk and Control Officer

The Business Risk and Control Officer is a strategic professional who stays abreast of developments within own field and contributes to directional strategy by considering their application in own job and the business. Utilizes in-depth subject matter expertise to ensure that the businesses meet standards and regulations and works with them to determine solutions for emerging issues. Recognizes technical authority for an area within the business. Requires basic commercial awareness. There are typically multiple people within the business that provide the same level of subject matter expertise. Developed communication and diplomacy skills are required in order to guide, influence and convince others, in particular colleagues in other areas and occasional external customers. Significant impact on the area through complex deliverables. Provides advice and counsel related to the technology or operations of the business. Work impacts an entire area, which eventually affects the overall performance and effectiveness of the sub-function/job family expertise. Developed communication and diplomacy skills are required in order to guide, influence and convince others, in particular colleagues in other areas and occasional external customers. Significant impact on the area through complex deliverables. Provides advice and counsel related to the technology or operations of the business. Strong risk and controls skills to design effective testing strategies and execute operative effectiveness and substantive testing. Attention to detail and ability to conduct adequate check and challenge. Work impacts an entire area, which eventually affects the overall performance and effectiveness of the sub-function/job family.

Responsibilities:

• Help contribute to governance and the facilitation of the execution of the Manager Control Assessment (MCA, i.e. Risk & Control Self-Assessment) as required by the MCA Standard including the assessment and appropriate approval of risk associated with business changes.
• Support teams in the quality, completeness, and accuracy of the implementation of the Control Framework, including Risk Control Policy, Control Standard, Issue Management Policy, Lesson Learned Policy and Control Inventory.
• Assist in performing a detailed analysis on the identification of issue root cause, partnering with control and process owners to recommendations holistic corrective actions and improvements, provide check and challenge to ensure appropriate escalation in accordance with Issue Management and Escalation Policies.
• Help contribute to the Lessons Learned Policy, including monitoring of control breaches and dissemination and learnings across other business units for process improvement to limit the occurrence of similar future events and where similar risk exposure might exist.
• Support the review and challenge process, within the FLUs, on the effective design and management of controls to mitigate risks as required by the Control Standards, including implementation and operation, conducting the control monitoring, handling deficiencies, and escalating issues for resolution.
• Help contribute to the timeliness, accuracy and completeness of the MCA through controls prior to the execution of a process (QC).
• Assist in the monitoring of the adherence to the MCA Standard through controls after the execution of a process (QA).
• Support in dealing with Operational and Compliance Risk in accordance with established Policy requirements.
• Assist in performing a detailed analysis to identify, assess, escalate, and manage risk exposures across Risk Categories (Operational Compliance, Strategic, Reputational, etc), including material, emerging and concentration risks in accordance with enterprise Policies and the establishment of Key Indicators to monitor risk exposures.
• Assist in supporting Risk Appetite and monitor / assess exposures against this in accordance with enterprise requirements (if applicable).
• Be part of the process to identify, assess, record and respond to Operational and Compliance Risk events, ensuring these are captured accurately, timely and in accordance with requirements.
• Help ensure that adequate governance and training are in place to support management of Risk profiles.
• Contribute to the risks associated with New Activities and changes to the Business, ensuring these are well understood and adequately controlled (if applicable).
• Support with risk and control assessments or coordination for programs within various risk stripes and ensure sufficient subject matter expertise exists to enable management of these risks within the Business (e.g. third party, fraud, sanctions etc) (if applicable).
• Coordinate risk and control responsibilities and ensure accountabilities are embedded within FLUs, including providing training and leading by example.
• Support with standards and procedures that conform to enterprise requirements and support sound operational and compliance risk management.
• Apply knowledge of the business, products or services to identify and implement control points and processes throughout the business.
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.

Qualifications:

• 6-10 years of experience.
• MS Excel, MS Access, SAS, SQL, Visual Basic a plus. 5+ years’ experience in financial services.
• Consistently demonstrates clear and concise written and verbal communication skills.
• Effective organizational influencing skills required.
• Third party vendor management preferred. Demonstrated ability to lead global team efforts.
• Excellent problem-solving skills. Ability to comprehend the big picture with high attention to critical details.
• Demonstrated ability to develop and implement strategy and process improvement initiatives.

Education:

• Bachelor's/University degree, Master's degree preferred.

Additional Job Description:

• Has the ability to operate with a limited level of direct supervision and can exercise independence of judgment and autonomy.
• Requires a comprehensive understanding of multiple risk management programs supporting Citi Businesses (Issues Mgmt, MCA, Audit Support, Process Improvements, etc.) and how they achieve the objectives of the function.
• Applies in-depth understanding of the business impact of associated business risks.
• Generally accountable for delivery of a full range of risk & control services across COO Transformation Program Management.
• Excellent communication skills required in order to negotiate internally, often at a senior level. Accountable for the end results of an area.
• Book of work consists of providing risk management support across Enterprise Change Management, Transformation, Consent Order Governance Activities, including Dependency Management, Critical Path Analysis, Org Simplification, QA/QC, and Executive Mgmt Reporting.
• Support will be over several MRA related processes, including Change Management, Program/Project Management, and working to build remediation activities for Org Simplification concerns.