Governance, Controls & Oversight Lead (VP)

About the role

The Data Transfer Office (DTO) is a critical component of Citi's mission to uphold the integrity and compliance of its data. The Control, Issue Analysis, and Governance team within DTO is responsible for establishing and operationalizing a world-class framework for managing cross-border data transfers. This team is part of the broader IMPaCT organization, which combines the Enterprise Data Office, Privacy, Records Management, and Cross Border Data Clearance functions.

Responsibilities

• Fortify Our Control Environment: Establish, maintain, and review robust control mechanisms to ensure they align with evolving regulations and are effective in practice.
• Drive Issue Resolution: Lead the analysis of control deficiencies, compliance breaches, and operational issues. Develop and track comprehensive remediation plans to ensure timely resolution and prevent recurrence.
• Shape Our Governance Framework: Actively contribute to the continuous development of the DTO's operational and governance models, focusing on enhancing consistency, mitigating risks, and ensuring robust oversight.
• Develop Clear Procedures: Create and standardize process guides and documentation to ensure governance standards are applied consistently across all data transfer activities.
• As a Trusted Advisor: Partner with Legal, Compliance, and Business teams to provide expert advice on governance requirements, interpret control standards, and facilitate collaborative issue resolution.
• Deliver Actionable Insights: Conduct quantitative and qualitative analysis of control performance and issue trends. Develop insightful reports and dashboards that inform senior management and empower data-driven decisions.
• Proactively Mitigate Risk: Identify, assess, and escalate control risks and gaps within the data transfer ecosystem, implementing effective mitigation strategies to enhance our overall risk posture.

Qualifications & Experience

• 6+ years of progressive experience in Risk Management, Control Assurance, Issue Management, or Data Governance within a global financial institution or large enterprise setting.
• Deep understanding of international data privacy laws and cross-border regulatory requirements (e.g., GDPR, CCPA) and their practical implications for control design.
• Demonstrable expertise in designing, implementing, and monitoring robust risk and control frameworks, including strong capabilities in process oversight, control testing, and issue management.
• Prominent ability to collaborate effectively with cross-functional teams and partners across a diverse, global organization.
• Outstanding written and verbal communication skills, with a talent for articulating complex control requirements, issues, and governance principles to diverse audiences.
• You can tell the story behind the data and translate complex problems into actionable insights.
• Advanced analytical and problem-solving skills, with a methodical approach to issue identification, root cause analysis, and creating sustainable solutions.
• Strong proficiency in MS Excel for data analysis and PowerPoint for creating professional, impactful reports.
• Solid understanding of financial services business models, operations, and enabling technology platforms.

Education

Bachelor's/University degree or equivalent experience.

Other Relevant Skills

Controls Management, Digital Skills (Including AI), Escalation Management, Laws and Regulations, Policy, Procedure, and Regulation, Process Execution, Program Management, Regulatory Management, Risk Management Culture, Risk Management Lifecycle.

Automated Processing and AI

Citi uses automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi. Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making.

Jurisdictional Considerations

Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.

Illinois Residents – AI Notice and Right

Citi is committed to providing equal employment opportunities and ensuring fair treatment for all applicants and employees. If you are a resident of Illinois and have questions about our use of automated processing and artificial intelligence, please refer to our AI Notice and Right.