Canada Chief Country Compliance Officer Director

The Compliance Risk Country Officer (CRCO) is responsible for overseeing the Compliance Program for all Citi activity within Canada: regulated branches, legal entities and other affiliates, as well as shared service centers, such as Citi Service Centers (CSCs). This includes ensuring global policies, standards and processes are applied, and suitable addenda and supplementary procedures established and maintained for compliance with applicable jurisdictional laws and regulations. Contradictions between local law and regulations, and group standards must be promptly identified and escalated, and mitigating processes and controls established to comply with jurisdictional requirements and mitigate the risks of non
- compliance with applicable group-wide or entity-chain related laws and regulations, and global policies and procedures.

The CRCO is responsible for overseeing the Citi Compliance Risk Management Program for Canada across multiple Citi businesses, regulated branches, legal entities and other affiliates, and shared service centers.

Responsibilities also include implementing applicable global compliance processes, setting Independent Compliance Risk Management (ICRM) priorities and driving transformation. The CRCO will work closely with senior product, function, and regional management, and other Independent Compliance Risk Management (ICRM) teams on strategic initiatives and emerging issues.

The CRCO provides franchise support to the Citi Country Officer and Banking Head (CCOBH) and country management, including offering credible challenge, escalation of issues and reporting, as appropriate. In addition, the CRCO also provides strategic direction and facilitates the implementation of the Compliance Risk Management (CRM) Framework, supported by the Comprehensive Strategic Plan (CSP) in the country. The CRCO reports to the Head of International ICRM, or a designee, in accordance with jurisdictional requirements.

In situations where this role is the designated Legal Entity Compliance Officer, the listed country/business/function/product level responsibilities will extend towards the legal entities under their purview as required to effectively perform their role.

**Responsibilities**:

- Key Activities Governance and Organization: Annual Country Compliance Plan: Preparing, obtaining approval and successfully completing an annual compliance risk management plan, in accordance with the global template and content and presentation requirements, setting out how compliance risk will be managed within the jurisdiction and its constituent parts, and the role to be played by ICRM in order to achieve the plan.
- Identification of the jurisdictional requirements, accountabilities and the process ownership and monitoring and testing ownership, as well as the determination of suitable staffing, hours required and secured budget in order to achieve the state of compliance within risk appetite will be set out in the plan, which will be reviewed quarterly with the jurisdictional CCC and ICRM, as well as any applicable legal entity, as well as where required by applicable regulatory agencies. The annual country compliance plan must take into consideration the applicable compliance risk assessments appropriate to the jurisdiction and its activities.
- State of Compliance Reporting: Preparing quarterly, in accordance with the approved global format, and in adherence to all established requirements for the State of Compliance reporting. The State of Compliance report will be presented to the appropriate Country Coordinating Committee, and legal entity Board or Board Audit Committee, or other such Board committee required within Canada.
- Enhancing Governance: Providing a valued interactive program of support and compliance risk management services covering the assessment and reporting of Key Compliance Risks across products, services, functions, legal entities, service centers and the jurisdiction as a whole. Providing stakeholders with insight and practical solutions as well as credible challenge to improve the ethical control culture, and conduct risk environment.
- Timely reporting of significant local regulatory issues to local, overseas, regional, and global stakeholders. Same-day escalation of regulatory reports received.
- Maintaining on-going assessment and reporting of the State of Compliance through the relevant corporate governance committees such as country audit committee(s) and/or subsidiary board(s), country coordinating committee and business risk management committee, and other management.
- Stakeholder Support and Relationships: Developing senior management relationships, including with legal entity management focus, inclusive of non-executive directors (where they exist in the jurisdiction), and the CCOBH as well as product functional and entity/service center line management. Informing senior management and directors of subsidiary boards, and the country/business management of significant complianc