The Data Transfer Office Senior Analyst – Governance and Controls will be responsible for providing governance and oversight, operational risk management and controls leadership across the respective business for all activities associated with Privacy. This individual will have responsibility for covering all privacy related capabilities and requirements including: compliance with the Citi Global Privacy Policy, identification and management of operational risks associated with Privacy and working across the business to ensure that effective controls and monitoring are in place to reduce risk. This role will ensure that the business is compliant with the Global Privacy Policy, Standards, and Procedures and the applicable laws rules, and regulatory requirements.

Responsibilities: Develop and maintain the data transfer governance framework and associated internal controls:

• Design, implement, and continuously refine a robust data transfer governance framework that aligns with regulatory requirements, industry best practices, and organizational policies.

• Establish and document internal controls, standards, and procedures for cross-border and internal data transfers to ensure compliance and mitigate risks.

• Regularly review and update the Cross border data transfer standard and process guides to adapt to evolving legal landscapes (e.g., GDPR, CCPA, BSS 24/7) and business needs.

Monitor the effectiveness of controls, conduct thematic issue reviews, manage Data Transfer Oversight (DTO) issues, and assess data transfer risks:

• Assist with the management of a monitoring program to assess the effectiveness and adherence to established data transfer controls.

• Conduct periodic and ad-hoc thematic reviews of data transfer processes and controls to identify potential gaps, inefficiencies, or emerging risks.

• Actively identify, track, and manage Data Transfer Oversight (DTO) issues, collaborating with relevant teams to ensure timely resolution and remediation.

• Perform regular risk assessments for all data transfer activities, evaluating potential impacts, likelihood, and recommending appropriate mitigation strategies.

Liaise with internal and external stakeholders, lead audit preparedness activities, and engage key business units on data governance matters:

• Serve as a primary point of contact for data transfer governance inquiries from various internal departments (e.g., Legal, Compliance, IT, Business Units) and external auditors or regulators.

• Coordinate and lead audit preparedness efforts related to data transfer, ensuring all necessary documentation, evidence, and responses are accurately prepared and provided.

• Proactively engage with key business units to foster a culture of data governance, provide guidance on data transfer requirements, and ensure their processes align with the governance framework.

• Facilitate communication and collaboration between diverse stakeholders to achieve consensus and drive effective data transfer solutions.

Support the development and preparation of materials for the Enterprise Data Transfer Forum:

• Contribute to the agenda setting, content creation, and presentation development for the Enterprise Data Transfer Forum meetings.

• Prepare reports, analyses, and executive summaries on data transfer governance performance, risk posture, and strategic initiatives for forum members.

• Document meeting minutes, action items, and decisions made during forum discussions, ensuring clear communication and accountability.

• Assist in tracking the progress of initiatives and recommendations stemming from the forum, providing updates as required.

Qualifications:

• 4-6 years of relevant experience in Data Privacy, Data Privacy Operations, Information Security or Cyber related risk management or in an Internal Audit, Risk Management, or Control Management related role

• Working knowledge of Data Privacy Compliance laws, rules, regulations, risks, and appropriate controls. Additionally, familiarity with privacy related technology considerations such as cookies, mobile devices, biometrics and geolocation data is desired

• Fluency in English

• Knowing the most effective and efficient processes to get things done, with a focus on continuous improvement

• Ability to anticipate and balance the needs of multiple stakeholders, while monitoring tight deadlines or unexpected requirement changes

• Ability to communicate effectively

• Strong project management skills

• Risk-based thinking and analytical mindset

• Up-to-date understanding of key Data Privacy risk and control concepts, tools and trends

• Proficient in the use of basic Microsoft applications (Word, Excel, PowerPoint)

Education

• Bachelor's/University degree or equivalent experience

What we can offer you:

By joining Citi Hungary, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive compensation package and enjoy a whole host of additional benefits that support you (and your family) to be well, live well and save well:

• Cafeteria Program

• Home Office Allowance (for colleagues working in hybrid work models)

• Paid Parental Leave Program (maternity and paternity leave)

• Private Medical Care Program and onsite medical rooms at our offices

• Pension Plan Contribution to voluntary pension fund

• Group Life Insurance

• Employee Assistance Program

• Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed

• Flexible work arrangements to support you in managing work - life balance

• Career progression opportunities across geographies and business lines

• Socially active employee communities with diverse networking opportunities

Alongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self every day. We want the best talent around the world to be energized to join us, motivated to stay, and empowered to thrive.

Sounds like Citi has everything you need? Then apply to discover the true extent of your capabilities.

#LI -OD1

Job Family Group:

Data Governance

Job Family:

Data Privacy & Data Transfers:

Time Type:

Full time

Primary Location Full Time Salary Range:

Ft10,627,270.00 - Ft17,818,330.00

Most Relevant Skills

Constructive Debate, Data Governance, Data Management, Internal Controls, Laws and Regulations, Management Reporting, Policy and Procedure, Program Management, Regulatory Management, Risk Controls and Monitors.

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

Automated Processing and AI

We use automated processing, including artificial intelligence, for our legitimate business interests (or our reasonable and appropriate business purposes) to identify and align the candidate's skills and abilities with a specific job opening. Additionally, if you so choose, or consent, we can match your skills and abilities to other suitable roles at Citi.

Importantly, all our hiring processes and decisions, including determining your suitability for a role, are conducted, checked, and decided by individuals. Our automated processing and AI do not involve relying on automatic or autonomous decision-making. Please refer to any Jurisdictional Considerations, with specific provisions for your country (where relevant) for further details.

This job opening is for an existing job vacancy.

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.