Brian Mcgrath Email & Phone Number

Dublin, Ie

Dublin, County Dublin, Ireland

I help the Citi Internal Audit (IA) function to have the most effective and efficient methodology and support compliance with standards, robust audit assurance delivery, mitigate audit risk, and overall produce the best results for all stakeholders.I partner with my colleagues across the IA delivery teams and other central IA teams to deliver solutions to the challenges we collectively face in maintaining robust audit assurance.I work with stakeholders across the three lines of defense to make sure that Citi's risk and control framework is as strong as it can be, and that it is aligned, where appropriate, to ensure Citi IA is as effective and efficient as it can be.I work with a fantastic team to help, collectively, deliver the best outcomes.

2019 – 2024 – Global Audit Director, Internal Audit Operational Risk Management (ORM)• Overseeing the delivery of high quality and value adding independent annual assurance through global and regional audits, audit and regulatory issue validation, and business monitoring activities covering ORM’s policies and methodologies, roles and responsibilities and key controls, as well as reviews of regulatory compliance with material regulatory standards• Partnering with auditees to ensure robust, sustainable, and practical corrective action plans are developed to support the effective and timely mitigation of issues identified through audits and reviews• Management of team of 18 audit professionals globally including the management of a risk-focused audit universe, resource allocation and assurance planning• Partnering with all Citi IA teams, product, functional and legal entity, for thematic and cross enterprise assessments and projects, for example providing assurance and reporting on key and emerging risks on end-to-end basis, and 1st and 2nd line key initiatives.• Engagement with Citi’s regulators e.g., OCC, FRB, PRA, SEC on an ongoing basis, including overseeing the delivery of regulatory requests, and satisfactorily completing multiple regulatory exams of IA's assurance on operational risk and related topics• Recruitment, retention, and development of team members • Collaborating with Citi’s IA Methodology, Innovation, Quality Assurance, and Learning & Development teams, to deliver solutions, standard testing programs, and training resources to benefit all of Citi IA• Active in multiple career development and local community initiatives, e.g., mentoring programs and educational support schemes in local schools2016 – 2019 - Senior Audit Manager, Internal Audit Operational Risk Management (EMEA and APAC)

Dublin, Ireland

Head of Governance, Strategy & Reporting in Group Regulatory, Compliance and Operational Risk • Management of a ‘Business Control Framework’ initiative, to implement enhanced ORM processes, supported by a new risk management system (IBM OpenPages)• Designing enhanced operational risk methodologies and associated operational processes• Production of key internal and external reports, and secretary of Group’s executive level Regulatory, Compliance & Operational Committee • Development and implementation of a risk policy management framework• Management of departmental operations processes and internal stakeholder engagement • Management of the function’s annual planning processes and co-ordination of function’s internal governance requirements • Member of the senior leadership team and manager of team of four

Ireland

Operational Risk Manager, Operational Risk Infrastructure • Design and implementation of operational risk policies, procedures and supporting materials • Conducting reviews and investigations into material risk events • Design and management of risk and control self-assessment project across Elavon’s three business lines• Operational Risk reporting to management and board risk committee. • Conducting risk assessment of new products and services

Dublin, Ireland

Operational Risk Manager, Policy & Implementation, 2010 – November 2012 • Member of Regulatory & Operational Risk function senior leadership team, and manager of team of five • Implementation of the Royal Bank of Scotland, UBG’s parent company, Group Policy Framework through a bank wide project• Management of firm wide new product risk assessment process, and management of ORM’s review and challenge of new products, and implementation of an operational risk appetite framework • Conducting ICAAP exercise for ORM, including quantitative and qualitative analysis, and reporting • Incident management – operation of risk management’s ‘command & control’ structure during significant IT incident Operational Risk Manager, Analytics and Finance 2008 – 2010 • Implementation of loss data collection processes, and associated loss data management system • Risk reporting to risk committees and UB Board • Review of operating model against Advanced Measurement Approach (AMA) requirements • Representing UBG at RBS Group, Heads of Operational Risk Management workshops • Deputising as Head of Financial Operational Risk, with line management responsibilities • Co-ordination of Sarbanes-Oxley program within the function• Operational risk reviews of finance specific projects and initiatives Secondment to RBS European Consumer Finance, Düsseldorf, Germany - 2007 (9 Months) • Participation in cross risk stripe due diligence review for UBG, and oversight of remediation actions • Implementation of risk and control self-assessments, across the branches in Germany, Netherlands, and Belgium• Implementing RBS’ ORM framework requirements and staff training on ORM

Dublin, Ireland

Ulster Bank University Graduate Program – 2005 – 2007 • Divisional representative on RBS Group wide working groups to implement risk management systems for risk and control self-assessments, issues management and events and loss management • Implementation of new risk management system and processes• Sarbanes-Oxley testing, and risk and control self-assessments • Business continuity planning co-ordination, and oversight of standards bank wide, including documentation and testing• Risk issues reporting and issue management

College Internship Program, Chemical Analysis Laboratory

Masters, Risk Management

University College Dublin / Institute of Bankers, 2007-2009 MSc in Risk Management, 2.1 Honours Master Main Courses Covered: - Regulatory.

Ba, Physics & Chemistry Of Advanced Materials, 2.1

Trinity College Dublin, 2001-2005 B.A. Physics & Chemistry of Advanced Materials, 2.1 Honours Degree Main Courses Covered: - Quantitative.

Education record