Summary
Overview
Work History
Education
Skills
Accomplishments
Languages
Residency
Awards
Certification
Timeline
Generic
Lilian Tan

Lilian Tan

Singapore

Summary

Highly accomplished Senior Risk and Controls Director with a strong track record of success. Skilled in managing large-scale, multimillion-dollar projects and driving strategic initiatives. Experience in various aspects of financial institutions, from business specialism to information technology, with global cross-border exposure. Proven expertise in independently overseeing business and systems implementations, workforce strategy initiatives, outsourcing governance and controls, risk management, data privacy, and regulatory compliance. Results-oriented professional with a robust background in directing and managing large-scale operations. Consistently achieves success through strategic planning and execution. Demonstrated ability to implement innovative solutions that enhance productivity and operational effectiveness. Known for fostering teamwork and adapting to evolving business needs to ensure alignment with organizational goals.

Overview

24
24
years of professional experience
1
1
Certification

Work History

Director – Head of Singapore Chief Country Officer Business Execution

Citibank N.A Singapore
01.2024 - Current
  • Responsible for driving strategic and business critical initiatives and programs, uplifting and streamlining governance, cultivating a robust risk and control environment and other critical activities
  • Responsible for Franchise level governance committees, providing oversight on all franchise level risks
  • Provide oversight of Business Critical Milestone Reporting, Business People strategy as well as communication strategy for internal, external client and media events for the CCO
  • Support Singapore CCO on issue management, escalations, governance, management reporting as well as CCO Scorecard KPIs and metrics
  • Champion key initiatives on behalf of CCO and act as delegate on New Activity Approvals, AML/KYC exceptions, Third Party Management and change management
  • Independent execution of deep dives and Singapore standalone projects, Consent Order and Transformation efforts as well as drive administrative, operational and quality improvements through partnership with internal senior management teams
  • Manage financial control by applying comprehensive understanding of the department Profit & Loss (P&L) including appropriate accruals, client allocations, impact of capitalization, recovery and fixed price contracts in order to improve operational efficient and productivity
  • Execute vendor management activities, including ensuring legal requirements are met and coordinate contract negotiation and processing
  • Assess Legal Entity risk when business decisions are made, impact to reputational and strategy risk, and driving compliance with applicable laws, rules and regulations
  • Act as first point of contact for Internal Audits, Compliance Testing and regulatory and industry activities (MAS, ABS etc)

Director – Head of Singapore PBWM CAO Risk & Controls, Consumer In-Business Regulatory Risk Management (IBRRM) and Consumer In-Business Data Privacy Officer (IBPO)

Citibank Singapore Limited
04.2021 - 01.2024
  • Part of Singapore Consumer Management Team for Citibank Global Wealth, managing a team of ~84FTE, responsible for the consumer business risk & control governance with front-to-back line-of-sight across Retail Bank (Mortgage, Wealth Management, Insurance, Branch), Credit Cards, Personal Loans as well as Digital Marketing, Digital Banking and Data Analytics
  • Representing the Singapore Consumer business in relevant risk and control committees, management meetings, and forums on risk and control updates
  • Presents to the Citibank Singapore Limited Quarterly Board meetings, key face off to the CSL Independent Board of Directors, Audit Committee and Risk Management Committees
  • Responsible for the Consumer Business Risk and Controls, Controls Governance, Consumer product controls, Branch Oversight Function (BOF), Investment sand Insurance Sales Surveillance Team (IISS), Balance Scorecard Framework (BSC), Fair Dealing Guidelines (FDG), FIDREC disputes (client complaints management), Consumer Business Support Unit (CBSU) clients due diligence onboarding (AML, Sanctions, KYC, CDD/EDD, SPF, Red Flags), regulatory risk management (MAS RFI/examinations, internal external audits, compliance testing) as well as business data privacy (PDPA, GDPR, Brazil LGPD, New Zealand NZPA, China PIPL, California CCPA, info sec breaches, data leakage, privacy breach/non-compliance), MAS FEAT, MAS IAC Framework, New Product Approvals, Consumer Critical business process and Operational Resilience Framework as well as ICAAP Scenario Analysis
  • Accountable for end results, audit and exam management, issue management, change control, regulatory/policy adherence, 3rd party vendor audit resolutions, functional strategy, new product approvals, financials budgeting, planning and policy formulation
  • Accountable and oversight for Consumer Business First LOD Risk Management - Operational Risk, Compliance Risk, Reputational Risk, Bribery Risk, Customer Client Protection risk, Data risk, Prudential & Regulatory risk, Human Capital risk, Market Practices risk, Model Risk, Money Laundering risk, Processing Risk, Sanctions Risk, Financial Statement Reporting Risk
  • Responsible for Citibank Singapore Limited management activities including leading and implementing cross product critical complex remediation projects, strategic controls operating model, digital transformation and technology systemic enhancements across various products and functions in Consumer Banking business
  • Lead and implement Citi Global Wealth (CGW) re-organisation, integration and operating model change, including standardizing and transforming the CGW Risk and Controls workforce strategy for Singapore Consumer business

Executive Director - Head of APAC Corporate Third Party Oversight, Strategy & Execution

JPMorgan Chase
10.2015 - 04.2021
  • APAC Head of Outsourcing Programme (CTPO) – Responsible for internal and external JPMC supplier outsourcing governance and controls, Programme location strategy, operating model and regional workforce strategy across the 14 countries
  • Built the APAC Programme from inception, managing a team of ~90 FTE and ~ 4400 external suppliers across APAC
  • Policy & Governance – Manage and align 14 country regulatory outsourcing requirements into Policies & Standards, ensuring regulatory requirements are met and supplier risks are addressed and mitigated
  • Key outsourcing advocate and face off to regulators on outsourcing RFI & examinations (MAS, HKMA, BNM, BSP, RBI, CBIRC etc), internal & external audits, RCSA , Audits & Compliance Testing activities across the region
  • Volume of ~ 120 per annum; no regulator MRA issued and no critical Audit findings during tenureship
  • Third Party Risk Management – Accountable for the execution of ~320 supplier technology controls assessments (onsite assessments) as well as supplier application security controls assessments to manage outsourcing risks (including supplier resiliency e.g
  • COVID 19 pandemic, incident management e.g
  • Cybersecurity, PCI/DSS, data and operational breaches)
  • Define remediation plans and work with suppliers to implement and address control weaknesses
  • Conduct quality control process assurance & action plan management
  • Third Party Management Office – Accountable for process execution of ~3000 engagements ensure quality, consistency and compliance of supplier onboarding due-diligence processes for all LOBs
  • Oversee supplier performance (SLA/KPI) management, supplier risks (operation and technology outsourcing risk, supplier financial viability), supplier issues, escalations, remediation and regulatory reporting
  • Inter-affiliate Services – Accountable for JPMC inter-affiliate outsourcing policy and standards, regional governance, due-diligence processes for ~1800 engagements, performance (SLA/KPI) management, tools & metric reporting
  • Partner in rolling out a new operating model for IAO on policy, governance & controls, streamlined processes, resource management and implementation of new system tool and reporting

Global IT Center of Excellence Lead

Credit Suisse
06.2014 - 09.2015
  • Responsible for Global IT Workforce Strategy initiative with Regional & Divisional stakeholders to maintain and refine the Bank’s 3 year plan on global footprint, workforce mix, seniority, site capacity planning, supplier mix and operating model alignment (savings CHF$30mil in 2014)
  • Partner divisions in defining Global IT CoE Strategy and Target Operating Model (TOM), identifying right work in right operating model (Captive/Outsourced), contract pricing structure (Managed Service/Managed Capacity) at right location (CoE Sites/Vendor Sites)
  • Oversight, control and implementation of divisional target op model through execution process, governance framework, methods and tools
  • Tracking MIS reports and analytics on Global CoE deployments status vs management targets
  • Definition of training programmes in alignment of Workforce Strategy objectives, TOM and engagement with Regional Human Capital Leads & Divisional HR stakeholders on GYO & Talent Hiring
  • Central face off with Global Regulators, Compliance and Audit on emerging regulatory requirements
  • Conduct impact analysis of regulatory notices and implementation of adherence plans (FRBNY, FINMA, FINRA, MAS, APRA, PRA etc)
  • Conduct periodic Global benchmarking and market research to continuously deliver innovative sourcing options
  • Managing Singapore IT External Workforce, vendor performance and relationship management

Investment Bank Operations Change & Location Strategy Lead

Barclays
01.2012 - 06.2014
  • Set up Centralised Utility & Global Right-shoring Initiatives
  • Managing Global BPO initiative from vendor outsourcing, Business Case, RFI, RFP, Vendor Selection and implementation to new India hubs
  • Setting up a new centralised utility across various clusters of the bank (Wealth, Corporate, IB, Barclays Card, Retail, Africa ABSA) within the Finance, Operations, Barclays Africa (ABSA) and Technology divisions (circa 500 roles)
  • Also, in parallel, reengineering processes, Target Operating Model and systems implementation of a new centralised IT system across multiple layers of network within the bank
  • Singapore Regulatory Data Segregation and Utility Set Up
  • Managed the segregation of APAC trade capture processes, system access and data segregation in Mid-Office Operations into a newly set up Front-Office APAC Trade Capture Utility (circa 60 FTE) in order to meet new regulatory rules on Unauthorised Trading
  • Managing Global Location Strategy initiatives (target savings £70mil) to near shore and far shore locations such as Delaware, Glasgow, Chennai and Mumbai
  • Responsible for analysis for Global CIBWIM Location Strategy Target Savings, Cost to Achieve and revised stretch targets to achieve target location footprint
  • Responsible for migration of Asset Servicing, Securities Services, FICC, Prime and Equities operations to Chennai (circa 700FTE in 2012), Mumbai (circa 500 FTE in 2013) and Delaware (circa 110 FTE in 2013)
  • Responsible for capturing and delivering requirements from local and global stakeholders
  • Facing off to Operations, IT, Tax, HR, Physical Security, Service Management, Legal, Compliance, Data Privacy, Ops Risk and Control, Business Continuity Management, Transaction Reporting, Client Money, Change &Transitions
  • Responsible for managing budget and resourcing for Singapore, Glasgow and US migrations
  • Responsible for senior management reporting on status, budget, risks and issues
  • Building out the project team in Singapore, Chennai India, Glasgow and New York for offshoring initiatives and providing oversight and governance on best practices and approach

IT Project Manager & PMO, Asia Equities Integration

RBS Asia Pacific
06.2010 - 09.2011

Project Manager, Regional Finance

HSBC Insurance (Asia Pacific) Limited
06.2008 - 05.2010

Project Manager (contract), Program Management Office

Deutsche Bank (UK)
12.2006 - 06.2007

Finance Project (contract), Group Financial Control

AXA (UK)
09.2006 - 12.2006

Business & IT Consultant

AEM Consulting Group (Ajilon)
07.2005 - 07.2006

Enforcement Project Officer

Australia Securities Investments Commission
09.2003 - 07.2005

Website Analyst Supervisor

Ineedhits.com
01.2001 - 04.2003

Education

Bachelor of Commerce - eCommerce and Management

Murdoch University
Perth, WA
01.2001

Bachelor of Science - Information Systems Development and Business Information Systems

Murdoch University
Perth, WA
01.2001

Skills

  • Outsourcing Governance
  • Regulatory Risk Management
  • Compliance & Audit
  • Risk & Controls
  • Tech & Cloud Controls
  • Programme & Project Management
  • Location & Workforce Strategy
  • Operating Model
  • Business Transformation
  • Business and Systems Integration
  • Sales Surveillance
  • FIDREC Complaints
  • Sanctions
  • AML, KYC, CDD/EDD
  • Data Privacy
  • ICAAP Scenario Analysis
  • Reputational Risk
  • Operational Risk
  • Consumer Banking Controls
  • Data Risk
  • Fraud Risk
  • New Product Approval

Accomplishments

  • JP Morgan Chase GSS All Star Award 2019 – Excellence in Delivery
  • JP Morgan Chase GSS All Star Award 2018 – Excellence in Ownership and Accountability
  • JP Morgan Chase GSS All Star Award 2018 – Excellence in Collaboration
  • JP Morgan Chase GSS All Star Award 2017 – Best in Class Service
  • JP Morgan Chase APAC CEO Award 2015
  • HSBC Insurance Certificate of Merit 2008
  • ineedhits.com Company Excellence Award 2002
  • ineedhits.com Employee of the Month 2002
  • Cynet Communication Top Sales Achiever 1999

Languages

English
Bilingual or Proficient (C2)
Bahasa Malaysia
Advanced (C1)
Bahasa Indonesia
Advanced (C1)
Cantonese
Upper intermediate (B2)
Mandarin
Intermediate (B1)

Residency

Singapore Permanent Resident

Awards

  • JP Morgan Chase GSS All Star Award, 2019, Excellence in Delivery
  • JP Morgan Chase GSS All Star Award, 2018, Excellence in Ownership and Accountability
  • JP Morgan Chase GSS All Star Award, 2018, Excellence in Collaboration
  • JP Morgan Chase GSS All Star Award, 2017, Best in Class Service
  • JP Morgan Chase APAC CEO Award, 2015
  • HSBC Insurance Certificate of Merit, 2008
  • Ineedhits.com Company Excellence Award, 2002
  • Ineedhits.com Employee of the Month, 2002
  • Cynet Communication Top Sales Achiever, 1999

Certification

  • IAPP Certified Information Privacy Manager (CIPM) – in progress
  • IMD – Driving Digital Transformation
  • Certified Governance Risk and Control Auditor (GRCA) – OCEG
  • Certified Governance Risk and Control Professional (GRCP) – OCEG
  • Certified Cloud Security Professional (CCSP) Training Seminar – ISC2
  • Advanced Certified Regulatory Vendor Program Manager (CRVPM) Level 4 – Compliance Education Institute
  • Lean Six Sigma Green Belt – completed examination pending project implementation
  • Prince2 Project Management Certification
  • Microsoft Certified Professional (MCP)
  • Certified Internet Webmaster (CIW Associate)
  • Highly Protected (Top Secret) Security Clearance, ASIC Australia
  • JP Morgan Chase Robotics Process Automation
  • HSBC Group Compliance Training – Information Risk, Fraud Protection, SOX404

Timeline

Director – Head of Singapore Chief Country Officer Business Execution

Citibank N.A Singapore
01.2024 - Current

Director – Head of Singapore PBWM CAO Risk & Controls, Consumer In-Business Regulatory Risk Management (IBRRM) and Consumer In-Business Data Privacy Officer (IBPO)

Citibank Singapore Limited
04.2021 - 01.2024

Executive Director - Head of APAC Corporate Third Party Oversight, Strategy & Execution

JPMorgan Chase
10.2015 - 04.2021

Global IT Center of Excellence Lead

Credit Suisse
06.2014 - 09.2015

Investment Bank Operations Change & Location Strategy Lead

Barclays
01.2012 - 06.2014

IT Project Manager & PMO, Asia Equities Integration

RBS Asia Pacific
06.2010 - 09.2011

Project Manager, Regional Finance

HSBC Insurance (Asia Pacific) Limited
06.2008 - 05.2010

Project Manager (contract), Program Management Office

Deutsche Bank (UK)
12.2006 - 06.2007

Finance Project (contract), Group Financial Control

AXA (UK)
09.2006 - 12.2006

Business & IT Consultant

AEM Consulting Group (Ajilon)
07.2005 - 07.2006

Enforcement Project Officer

Australia Securities Investments Commission
09.2003 - 07.2005

Website Analyst Supervisor

Ineedhits.com
01.2001 - 04.2003

Bachelor of Science - Information Systems Development and Business Information Systems

Murdoch University

Bachelor of Commerce - eCommerce and Management

Murdoch University
Lilian Tan