Privacy and Responsible Information Management Officer, VP

Serves as a compliance risk officer for Independent Compliance Risk Management (ICRM) responsible for establishing internal strategies, policies, procedures, processes, and programs to prevent violations of law, rule, or regulation and design and deliver a risk management framework that maintains risk levels within the firm's risk appetite and protect the franchise. In addition, engages with the ICRM product and function coverage teams, in order to partner to develop and apply CRM program solutions that meet business and customer needs in a manner consistent with the Citi program framework. Responsibilities: Assist with the design, development, delivery and maintenance of best-in-class Compliance, programs, policies and practices for ICRM. Regularly reviewing and updating privacy and records management policies aligned with relevant data protection laws (e.g., GDPR, CCPA) to determine impacts to the business. Provide support to PFICRM regarding privacy and records management matters. Assist with relevant compliance risk assessments. Preparing reports to disseminate pertinent information to PFICRM and lines of business to oversee privacy and records management risks. Conducting monitoring to identify potential privacy and records management risks and non-compliance issues. Providing credible challenge of existing control environment across businesses and functions aligned with relevant privacy laws (e.g., GDPR, CCPA). Developing and/or enhancing current reporting metrics to demonstrate the oversight of compliance and risks aligned to relevant privacy laws (e.g., GDPR, CCPA). Monitoring adherence to Citi’s Compliance Risk Policies and measuring compliance risk through a robust control framework and ensuring that reviews are conducted consistently across each entity on a regular basis to confirm that controls identified are operating effectively. Performing analyses of comparative data, preparing and presenting regional and global reports related to compliance risk assessments, and monitoring of compliance related issues. Partnering, collaborating and working with other areas within Citi, as necessary. Keeping abreast of regulatory changes, new regulations and internal policy changes in order to further identify new key risk areas. Additional duties as assigned.