Technology Controls Senior Analyst - Assistant Vice President

Overview

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients' best interests. Our Cloud Technology Services teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do-from keeping the bank safe, managing global resources, to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.

About Our Team:

Within Citi's Technology & Business Enablement organization, two partner teams come together to deliver technology excellence and manage safety, soundness, and risk mitigation of those technologies: Cloud Technology Services (CTS) and Technology Controls.

Citi's Cloud Technology Services (CTS) team provides the critical technical foundation for Citi's operations and is responsible for delivering reliable IT solutions, scalable infrastructure services, and secure capabilities while creating a trusted customer experience and enabling Citi's workforce to be the best for our clients. Making the bank simpler, greener, and better connected while powering it with trusted, well-secured data, and automating policy enforcement through code are core to Citi's refreshed global strategy. Data quality, simplification, environmental stability, automation, and service excellence are the key pillars guiding our strategic journey.

CTS is driving a Cloud First strategy that optimizes the IT environment, reduces complexity, and increases automation to enable more agile application delivery. We aim to give Citi businesses a competitive edge by leveraging cloud-scale architectures and enabling new infrastructure economics.

The Technology Controls function supports the CTS Public Cloud services team, specializing in technology risk and controls management for Public Cloud Infrastructure and Platform as a Service (IaaS/PaaS) capabilities across providers such as AWS, Google Cloud Platform (GCP), and data platforms, as well as for Artificial Intelligence solutions offered by Cloud Service Providers.

Responsibilities

• Advise engineers on application of policy, and consult policies and prioritization of codified controls with engineering teams who have multiple concurrent domains such as compute, containers, DB, middleware, etc.

• Ensure processes are designed with control in mind, and controls are automated and sustainable for cloud scale, and achieve defense in depth.

• Coordinate cross-border clearance as needed.

• Maintain continual assessment of Management Controls Assessment (MCA) efficacy for Public Cloud, assess the effectiveness of existing controls, identify areas for improvement, and execute changes, continually managing controls enhancements to increase efficiency and reduce risk.

• Collaborate with key stakeholders to assess potential risks, develop risk mitigation activities, and define acceptable risk levels across various areas of operation.

• Stay informed about regulatory changes and industry best practices related to control management, ensuring the controls program aligns with standards.

• Provide regular updates to senior management on the performance of the controls assessment and design.

• Appropriately assess risk when business decisions are made, safeguarding Citi, its clients and assets by driving compliance with applicable laws, rules and regulations, applying ethical judgment, escalating and reporting control issues with transparency, and supervising teams to maintain standards.

Qualifications

• Relevant work experience in Technology Risk & Controls, or Risk/Security/Compliance in a large, heavily regulated organization.

• Ability to identify, measure, and manage key risks and controls; analytical skills to evaluate complex risk and control activities.

• Strong sense of accountability and ownership with results orientation.

• Excellent communication skills; ability to engage across stakeholder groups.

• Strong proficiency in Microsoft Office, particularly Excel, PowerPoint, and Word.

• Demonstrable interest in Public Cloud risk identification and mitigation.

• Experience with NIST, COBIT, ITIL, CSA, and/or ISO risk and ITSM frameworks.

Preferred Qualifications

• Cloud certifications such as AWS Certified Cloud Practitioner, AWS Certified Security Specialty, or cloud-agnostic certifications like CCAK, CCSK, CompTIA Cloud+.

• Experience in influence management disciplines such as project or product management.

• Experience with modern microservices architectures and deployments (Docker/Kubernetes) or cloud infrastructure and data services (compute, storage, networking, databases, middleware).

• Experience working in a distributed, cloud-based environment using Azure/AWS/GCP.

Education

• Bachelor's/University degree or equivalent experience.

What we'll provide you

By joining Citi, you will be part of a business casual workplace with a hybrid model (up to 2 days working at home per week) and receive a competitive base salary (reviewed annually), along with a range of benefits:

• 27 days of annual leave (plus bank holidays)

• Discretionary annual performance bonus

• Private medical care & life insurance

• Employee assistance program

• Pension plan

• Paid parental leave

• Special discounts for employees, family, and friends

• Access to learning and development resources

Alongside these benefits Citi is committed to ensuring our workplace is inclusive and welcoming to everyone. We want the best talent to be energized to join us, motivated to stay, and empowered to thrive.

Job Family Group: Controls Governance & Oversight

Job Family: Assessment & Design

Time Type: Full time

Most Relevant Skills

Analytical Thinking, Business Insights, Communication, Constructive Debate, Controls Lifecycle, Issue Management, Process Design, Program Management, Risk Management, Stakeholder Management.

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity, review Accessibility at Citi.