Обязанности и достижения:
CBS consisted of Accounts Payable, General Services (office cars & taxies, travel, records management, mail distribution, catering, reception), Procurement, Citi Employee Services (CES).
Main responsibilities include coordination of Information Security, Continuity of Business, Operational risks monitoring within the department:
- lead department RCSA Policy implementation: carry out, manage, document department RCSA and required corrective action plan through to resolution;
- support to Service Supervisors to ensure department processes are in compliance with operational risk & control policy;
- maintain the Key Risk Indicators;
- ensure the risk mitigating controls are efficient and sufficient in the department;
- interact with internal and external auditors and inspectors, ensure successful ARR rating for the department;
- perform independent reviews and evaluation of proper corrective actions designed to add value and improve Bank's business in regard to controls; follow up the Corrective Action Plans (CAP);
- participate in complex issues investigations;
- coordinate Continuity of Business activities within the department (BIA, BRP, M&R Survey, DOA testing);
- perform Information Security Compliance checks (ISRAs, TPISAs);
- review and monitor the Corporate Policies and implement its updates to ensure compliance of products and processes in the department (COB, Vendor Management, Records Management, Code of Conducts, Global security, Information Security, other applicable policies);
- review and monitor the Local Regulations and implement its updates of the ensure compliance of products and processes;
- keep Control team and Business Management informed on the issues and gaps;
- effective interaction with Control team, Compliance and other departments;
- study and know the Citigroup policies and local regulations;
- regular MIS, status and other reporting to the regional and local management.
Main achievements:
- independent reviews of all activities within department (for CIS countries) were held;
- satisfactory ARR ratings during 2+ audits (Country ARRs, CES ARR, Procurement ARR);
- satisfactory ratings of 3+ internal QA reviews;
- proper corrective actions implementation and completion;
- completion of at least 2 TPISAs with further gaps tracking and timely closure.
- successful RCSA completion during year.