The Business Risk and Control Sr Officer is a strategic professional accountable for multiple activities within COO Controls with a focus on the Office of AI. This role is responsible for embedding robust risk management practices into Citi’s AI strategy, ensuring that models, tools, and AI‑enabled processes operate safely, ethically, and in compliance with regulatory and internal standards. Individuals in this role will cover a broad range of in-business/function Artificial Intelligence (AI) impacted risk and control responsibilities.

The ideal candidate has a strong background in Technology Risk, paired with a strong understanding of emerging risks in AI, digitization and automation. Excellent communication skills are required in order to negotiate internally, often at a senior level. Some external communication may be necessary. Accountable for the end results of various In-Business Controls programs.

Key Responsibilities Risk Identification & Assessment

• Identify, assess, and document risks associated with AI initiatives across the Office of AI.
• Support the review of risk assessments for AI use cases, tools, and model deployments to ensure alignment with enterprise risk appetite and regulatory expectations.
• Partner with Office of AI to evaluate potential control gaps and ensure risks are surfaced early in the development lifecycle.
• Drive execution of the MCA in accordance with the ORM Policy & Framework, as well as applicable Policies, Standards, and Procedures.

Control Design & Implementation

• Support the operationalization of a robust control framework that addresses AI-specific risks.
• Ensure appropriate owned AI-related controls are mapped, tested, and validated.
• Support creation of standardized controls, procedures, and templates to be used for AI strategy.

In‑Business Controls (IBC) Execution

• Partner with business leaders to ensure existing IBC processes (MCA, Issue Management) effectively capture relevant AI‑related risks and controls.
• Support development of KRIs/KPIs for AI risk monitoring.
• Assist in Issue identification, remediation planning, and sustainable closure for AI-related control breaks.
• Responsible for the coordination and comprehensive management of issues with key stakeholders
• Drive issue quality reviews ensuring compliance with Issue

Governance & Compliance

• Work closely with Legal, Compliance, Model Risk Management, Data Governance, and Technology partners to ensure adherence to internal policies and external regulatory requirements related to AI.
• Engage with subject matter expertise on regulatory trends and emerging industry frameworks for responsible AI.
• Prepare materials for senior leadership, governance forums, audits, and regulatory reviews.
• Responsible for the assessment of activities and processes as per required Policies, Standards and Procedures to strengthen risk management quality.

Cross-Functional Collaboration

• Act as a bridge between AI Strategy, Technology, Operations, and Risk functions to ensure shared understanding of risks and sound execution practices.
• Advise on control implications of new AI capabilities and emerging technologies.

Qualifications Required

• 7+ years of experience in Risk Management, In‑Business Controls, Operational Risk, Compliance, Technology Risk, or related field.
• Knowledge of AI/ML concepts, data risks, or model governance (hands‑on technical background not required, but familiarity is beneficial).
• Demonstrated success operating in a fast-paced, agile environment.
• Experience conducting risk assessments, control evaluations, or regulatory reviews.
• Demonstrated ability to influence cross‑functional partners and lead risk/control discussions with technical and business teams.
• Strong analytical, problem‑solving, and documentation skills.
• Working knowledge of emerging AI governance frameworks (e.g., Responsible AI guidelines, NIST AI RMF).
• Bachelor’s degree in Business, Risk, Technology, Analytics, or related field; advanced degree a plus.

Competencies

• Strong risk mindset with ability to challenge thoughtfully.
• Ability to translate technical AI risks into business-impact language for non-technical stakeholders.
• Excellent communication and executive‑level presentation skills.
• High attention to detail and strong organizational skills.

Job Family Group:

Controls Governance & Oversight:

Job Family:

Cross-disciplinary Controls

Time Type:

Full time

Most Relevant Skills

Analytical Thinking, Business Acumen, Communication, Constructive Debate, Controls Assessment, Controls Lifecycle, Escalation Management, Issue Management, Risk Management, Stakeholder Management.

Other Relevant Skills

For complementary skills, please see above and/or contact the recruiter.

Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.

If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.

View Citi’s EEO Policy Statement and the Know Your Rights poster.