Senior Vice President - Data Risk Officer, Risk ...

Operational Risk Management (ORM) is an enterprise-level independent risk management function responsible for enterprise-wide oversight and aggregation of operational risk. Its mandate covers all business lines (US Personal Banking, Global Wealth Management, Markets, Services, Banking, Global Functions & EO&T) spanning all geographies. The ORM function oversees the design and implementation of the non-financial risk management framework. Key objectives of the data risk management framework include: + Operating model, staffing, and culture + Operational risk appetite + Control objectives and standards + Operational risk and control assessments and reporting + Strategic decision-making + The effective execution of Citi's Enterprise Data transformation Because Citi's Enterprise Data transformation cuts across the enterprise and is multi-disciplinary in nature, ORM's oversight for data risk management at Citi relies upon a u201cHub and Spokeu201d approach, incorporating the second line of defense (2LOD) Business/Region/LV Global Op Risk Officers and other relevant independent risk functions. These teams work collectively to dispense appropriate risk oversight responsibilities, ensuring well-coordinated risk assessments, risk identification, measurement/monitoring, and timely remediation of key gaps. Furthermore, the ORM Data Risk team delivers an enterprise-level aggregation of risk oversight outcomes to assess the firm's progress toward the Data Transformation target state. The Data Risk Officer role will serve as a subject matter expert on data risk appetite planning, metric reviews, and analysis, leading the review and challenge of firm-wide efforts to manage data risk and the monitoring of data risk reduction activities. This role will have a central role in the ingestion and synthesis of firm-wide 2LOD challenge activity on data risk into the Data Risk Appetite Assessment process. Key Responsibilities: + Support the primary oversight of the firm's Data Risk Appetite, including assessment of factors of risk, assessing and monitoring

Created: 2026-03-02