Job Description

This position reports to the Tech Infrastructure Controls Testing Head, within the Global Functions Technology Control Testing Utility; and is an execution-oriented individual contributor position accountable for end-to-end Tech Infrastructure controls monitoring – i.e., operational controls performance assurance/testing – which includes design, execution, results reporting, and insight sharing related to the above scope of controls monitoring/testing. The Tech Infrastructure Controls Testing leader is a subject matter expert on overall controls monitoring, with an excellent level of understanding of control testing and who closely follows latest trends in Tech Infrastructure controls testing and adapts them for application within their own job and covered businesses and functions. Excellent communication skills required to negotiate internally, often at a senior level. Developed communication and diplomacy skills are required to guide, influence and convince others, particularly colleagues in other areas and occasional external customers. Accountable for significant controls testing results and advice regarding the controls execution. Necessitates a degree of responsibility over technical strategy.Responsibilities:Supports the Cyber Security Controls Testing Utility by acting on assessing control design, designing control testing tools, developing control testing procedures, ensure control testing transitions, dispositioning exceptions, and developing insights.Carries key responsibility for Control Design Assessment (CDA) by executing CDA checklist/procedures for controls and recording results in Citi Risk & Control (CRC).Owns significant portions of control testing design activity, which includes writing control testing tool descriptions, and completing control testing and QUEST setup.Develops control testing procedures in Confluence and is responsible for obtaining necessary signoffs from covered businesses and functions.Performs a uniquely significant role on training Central Execution team overseas on all designed control testing tools and established control testing procedures.Has the ultimate decision on controls testing outlier disputes, holds the responsibility to raise concerns through IMPACT Concerns or QUEST Observation Logs based on the Business.