James Ellery-Gower
Global Head of TPM Country Governance - Citi
James is the Global Head of TPM Country Governance at Citi. James is responsible for enhancing Citi’s global approach to Country Third Party Regulatory Risk and leads global teams in the execution of robust assurance activities. James is at the centre of Citi’s TPM Technology Transformation & Integration journey, bringing together Procurement, Third Party Risk, Operational Resilience, Digital and Cyber Risk, Legal and Compliance. Prior to joining Citi in 2022, James spent well over a decade at EY as a Consultant in Third Party Risk Management, Cyber Security and IT Assurance, and is CISSP and ISO certified. James brings insights and lived experiences from a suite of Financial Services and non-FS organisations and has worked closely alongside UK and European regulators.
DORA IN PRACTICE: WHAT’S STILL NOT WORKING IN ICT RISK AND THIRD‑PARTY OVERSIGHT? – PANEL DISCUSSION
Translating regulatory intent into implementation
- Moving from static lists to dynamic, risk‑based inventories of third‑ and Nth‑party providers
- Designing and executing meaningful operational resilience tests across complex, multi‑vendor and chain‑outsourcing scenarios
- Consistently meeting DORA’s tight incident reporting timelines when information sits across multiple providers and jurisdictions
- Retrofitting DORA requirements into legacy contracts, SLAs and governance structures without disrupting critical services
DORA IN PRACTICE: WHAT’S STILL NOT WORKING IN ICT RISK AND THIRD‑PARTY OVERSIGHT? – PANEL DISCUSSION
Translating regulatory intent into implementation
- Moving from static lists to dynamic, risk‑based inventories of third‑ and Nth‑party providers
- Designing and executing meaningful operational resilience tests across complex, multi‑vendor and chain‑outsourcing scenarios
- Consistently meeting DORA’s tight incident reporting timelines when information sits across multiple providers and jurisdictions
- Retrofitting DORA requirements into legacy contracts, SLAs and governance structures without disrupting critical services