Third-party Management - Risk Assessment And Data Analyst

The AVP – TPM Risk Assessment & Data Analyst (C12) is a senior analytical and governance role within the Procurement and Third Party Management team. This individual will be responsible for leading risk tiering efficacy validation, driving data-driven insights across the third party relationship portfolio, and ensuring the integrity of the risk governance framework. As a C12 AVP, you will combine technical expertise in data manipulation and modeling (using advanced Excel, Python, or VBA) with robust risk management principles to validate methodology compliance, identify portfolio anomalies, and advise senior control owners. You will act as a key liaison between operational teams, control owners, and technology partners to ensure risk tiering execution matches regulatory and internal policy standards. Responsibilities: Risk Tiering Governance & Quality Assurance: Define, implement, and audit quality control standards for Risk Tiering Reports and compliance records. Oversee end-to-end archival integrity to ensure audit readiness and absolute alignment with internal global record management standards. Business Process Alignment & Strategic Insights: Lead complex data reconciliation and alignment reviews across global organizational segments, business processes, and taxonomies (such as GAUs and Business Process Taxonomy). Analyze anomalies, design remediation pathways, and synthesize findings into strategic insights for executive-level decision-making. Methodology Efficacy & Validation: Design and execute analytical frameworks to computationally validate risk tiering distributions across the global third-party portfolio. Ensure that the outcomes of Aravo inherent risk assessments and heat matrix mappings (Significance of Impact vs. Likelihood) consistently reflect actual risk exposure and align with the Risk and Control Assessment Programs Methodology Standard. Risk Scoring Analytics & Advanced Scenario Modeling: Develop and utilize advanced analytical scripts (e.g., Python, SQL, VBA) to perform portfolio-wide risk scoring sensitivity analysis, hypothetical scenario planning, and methodology change impact assessments. Maintain and optimize calculation templates to reflect regulatory and taxonomy changes. Reporting Infrastructure & Platform Governance: Manage and govern the TPM reporting repository (SharePoint/collaboration platforms), ensuring robust access control, data classification standards, metadata tagging, and intuitive information architecture for global stakeholders. Stakeholder Engagement & Mentorship: Act as a subject matter expert on risk tiering calculations, providing guidance to business units and junior analysts. Partner with control and activity owners to resolve assessment conflicts, clarify policy overrides (such as Tier 1 overrides for critical services), and drive process improvements.

Professional Experience: 8+ years of experience in data analytics, risk management, or data governance roles, preferably within a global financial services institution. Direct experience in Third-Party Risk Management (TPRM) is highly desirable. Technical Analytics Expertise: Strong programming and automation capabilities using Python, SQL, VBA, or data extraction tools (e.g., Xceptor). Advanced Excel Capabilities: High-level mastery of MS Excel for complex data comparison, logical modeling, lookup calculations, and pivot-table analysis. Risk & Control Acumen: Strong understanding of inherent risk principles, operational risk taxonomies, and risk assessment methodologies (ideally combining Significance of Impact and Likelihood factors). Process Governance: Proven track record of managing structured compliance, archival processes, and collaboration platform governance (SharePoint, etc.) in a highly regulated environment. Communication & Influence: Excellent written and verbal communication skills. Ability to translate complex, technical data findings into clear, risk-based recommendations for non-technical senior managers. Education: Bachelor’s degree in Finance, Business Administration, Economics, Computer Science, Data Science, or a related quantitative field. Master's degree or professional certifications (e.g., FRM, CRISC) are a plus Preferred Qualifications: Direct operational experience using Aravo or similar enterprise-tier Third-Party Management applications. Familiarity with international financial services regulations, including data privacy (GDPR, etc.) and operational resilience guidelines. Experience in building interactive risk dashboards (e.g., Tableau, PowerBI) to visualize portfolio-level risk distributions. Preferred Qualifications: Direct operational experience using Aravo or similar enterprise-tier Third-Party Management applications. Familiarity with international financial services regulations, including data privacy (GDPR, etc.) and operational resilience guidelines. Experience in building interactive risk dashboards (e.g., Tableau, PowerBI) to visualize portfolio-level risk distributions. ------------------------------------------------------ Job Family Group: Research------------------------------------------------------ Job Family: Research Product------------------------------------------------------ Time Type: Full time------------------------------------------------------ Most Relevant Skills Please see the requirements listed above.------------------------------------------------------ Other Relevant Skills Risk Analysis, Third Party Management, Third Party Risk Management.------------------------------------------------------ Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi. View Citi’s EEO Policy Statement and the Know Your Rights poster.