Third Party Risk Management Managing Director (C16)

Citigroup is seeking a senior Third-Party Risk Management Managing Director (C16) to drive the effectiveness of Citi's Third-Party Risk Management framework, providing independent challenge to business decisions, and ensuring the use of third-party suppliers are within the bank’s Risk Appetite and aligned with applicable Regulatory expectations.

The successful candidate will serve as a senior leader and trusted advisor to Executive Management, Risk leaders, Procurement, Technology, Legal, Compliance, and Business stakeholders. This position requires strong leadership capabilities, deep operational risk expertise, and the ability to influence decision-making across a complex global organization.

Key Responsibilities

Strategic Leadership

• Collaborate with the Head of Procurement & Third-Party Management to drive oversight of third-party risk activities across multiple businesses, functions, and geographies.

• Independently assess risks and drive actions to address the root causes that may lead to operational risk losses by challenging both historical and proposed practices.

• Establish and execute the strategic roadmap for third-party risk oversight.

• Drive continuous enhancement of risk frameworks.

• Serve as a senior escalation point for significant third-party risk issues and emerging threats.

Enterprise Risk Oversight

• Provide independent oversight and effective challenge throughout the third-party lifecycle.

• Ensure consistent application of Citi's Third-Party Risk Management Policy and associated standards.

• Oversee risk assessments involving operational, cyber, information security, resilience, compliance, financial, geopolitical, and concentration risks.

• Evaluate material third-party relationships and recommend actions to manage residual risk.

Governance & Executive Reporting

• Lead preparation of executive-level reporting for senior management, risk committees, and governance forums.

• Monitor risk trends and emerging exposures across the third-party portfolio.

• Present risk insights and recommendations to Executive leadership and Regulators.

• Lead development of AI-readable risk metrics and dashboards, enabling real-time monitoring of the third-party portfolio for risk concentration and early warning indicators.

Risk Assessment & Due Diligence Oversight

• Oversee due diligence and risk assessment quality across critical and high-risk third-party relationships, including but not limited to: Specialized controls (e.g., Cyber, Cloud, Resilience, Model Risk, Artificial Intelligence), fourth party and concentration - ensuring the firm maintains full visibility into its extended supplier ecosystem.

• Challenge risk acceptance decisions and ensure appropriate escalation of material risks.

• Promote consistency in risk-rating methodologies and monitoring standards.

• Guide teams in the evaluation of control effectiveness and mitigation plans.

Stakeholder Management

• Partner with senior leaders across Technology, Procurement, Compliance, Legal, Operational Risk, Information Security, Resilience, and Business Functions.

• Influence business strategy through risk-informed decision making.

• Foster strong working relationships across global teams and regional stakeholders.

• Promote a culture of accountability, transparency, and risk excellence.

• Engage directly with external Regulators (OCC, Federal Reserve, FDIC, and international equivalents) to represent the firm's TPRM posture and respond to supervisory requests and Regulatory inquiries.

Talent Leadership

• Build, mentor, and develop high-performing risk management teams.

• Establish clear performance expectations and succession planning.

• Drive a culture of continuous learning and professional development.

Qualifications

Required Experience

• 12+ years of progressive, senior-level experience in Third Party Risk Management, Operational Risk, Enterprise Risk, Internal Audit, Compliance, or Vendor Management — with demonstrated experience in a Tier 1 or systemically important financial institution (SIFI) or comparable highly regulated environment.

• 5+ years of people leadership experience managing managers and/or leading large global programs.

• Demonstrated experience operating at senior management or managing director level within a highly regulated financial services environment.

• Deep understanding of third-party risk lifecycle management and risk governance frameworks.

• Knowledge of risks presented across the following risk stripes: Artificial Intelligence, Cyber, Resilience, Data, Model Risk Management.

• Experience presenting complex risk issues to executive committees and senior leadership.

• Significant experience leading regulatory, audit, or control remediation initiatives.

• Demonstrated experience managing third-party risks arising from cloud-native, SaaS, Cyber Security, and AI/ML-driven vendor relationships.

• Familiarity with interagency third-party risk management guidance (OCC 2023, FRB SR 23-4, FDIC FIL-29-2023) and international equivalents (DORA Articles 28–44, EBA Guidelines on ICT and Security Risk, MAS Guidelines on Outsourcing).

Technical Expertise

• Strong knowledge of:

• Third Party Risk Management

• Operational Risk Management

• Regulatory Compliance

• Operational Resilience

• Cyber Risk

• Information Security Risk

• Business Continuity

• Risk Governance

• Enterprise Controls

Education

• Bachelor's degree required.

• Master's degree, MBA, or equivalent advanced qualification preferred.

Leadership Expectations (C16 Managing Director Level)

The successful candidate will demonstrate the ability to:

• Shape enterprise-wide strategy and influence outcomes across multiple organizations.

• Exercise sound judgment under conditions of uncertainty and complexity.

• Balance business objectives with risk and control requirements.

• Lead large-scale transformational initiatives.

• Build strong executive relationships and drive organizational change.

• Communicate effectively with regulators, senior executives, and board-level stakeholders.

------------------------------------------------------

Job Family Group:

Risk Management

------------------------------------------------------

Job Family:

Operational Risk

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------

Primary Location:

New York New York United States

------------------------------------------------------

Primary Location Full Time Salary Range:

$250,000.00 - $500,000.00

In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.

------------------------------------------------------

Most Relevant Skills

Analytical Thinking, Controls Lifecycle, Credible Challenge, Governance, Policy, Procedure, and Regulation, Risk Management Lifecycle.

------------------------------------------------------

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

------------------------------------------------------

Anticipated Posting Close Date:

Nov 06, 2026

------------------------------------------------------

Automated Processing and AI

We use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi.

Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.

Illinois residents – AI Notice and Right

------------------------------------------------------

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.