Jordan Whitteberry

About Jordan Whitteberry

Cloud, AI, and Emerging Technology Risk Executive with 15+ years of experience leading enterprise governance, regulatory engagement, and control strategy across globally regulated financial institutions. Proven leader in establishing risk management frameworks for public cloud and artificial intelligence platforms across AWS and Google Cloud environments supporting mission-critical financial systems.Recognized for translating complex technology risk into actionable decision frameworks for senior executives and global regulators. Extensive experience aligning cloud and AI adoption with enterprise risk appetite, regulatory expectations, and secure engineering practices across large-scale global organizations.Track record of driving enterprise risk transformations, strengthening regulatory posture, and enabling next-generation technology adoption through scalable governance frameworks and strategic collaboration with engineering, audit, legal, and regulatory stakeholders.ENTERPRISE IMPACT- Directed regulatory response to interagency cloud cybersecurity review (OCC, Federal Reserve, and FDIC) resulting in a Satisfactory rating with zero MRAs/MRIAs- Closed OCC cloud governance MRA- Reduced cloud onboarding timelines from 12–18 months to ~4 months- Governed risk across AWS and Google Cloud environments supporting critical financial systems- Represented Citi in industry systemic risk initiative addressing cloud concentration risk

Experience

1. Director Public Cloud Risk & Controls

   Citi

   Jan 2023 — Present · New York, NY, US

   Led enterprise governance and regulatory oversight for Citi’s adoption of public cloud and emerging AI capabilities across AWS and Google Cloud platforms, supporting critical financial infrastructure- Directed regulatory engagement strategy for the 2023 interagency Coordinated Cybersecurity Review involving the OCC, Federal Reserve, and FDIC- Led global remediation and control transformation initiatives in response to internal audit, achieving 100% Manager Control Assessment (MCA) efficacy and elimination of prior audit findings- Established governance controls for AI deployments in public cloud, including control design, vendor contractual risk considerations, and residual risk evaluation for enterprise AI applications- Drove enterprise transformation initiatives that reduced cloud onboarding timelines from 12–18 months to ~4 months while maintaining regulatory compliance and control integrity- Led alignment of 1,500+ codified controls with enterprise RCSA/MCA frameworks to strengthen control monitoring and regulatory defensibility- Spearheaded global regulatory advocacy efforts addressing fragmented international regulatory requirements governing financial services cloud adoption.

Education

• Southern Methodist University

  Bachelor's of Science, Management Science

  2006 — 2010

• Harvard Business School Online

  Core: Credential of Readiness

  2016 — 2016

Skills

• Product Management
• Strategic Planning
• Microsoft Excel
• Product Marketing
• Business Intelligence
• Management
• Resource Strategy
• Process Improvement
• Business Analysis
• Mandarin
• Project Management
• Business Process Improvement
• Strategic Thinking
• Business Strategy
• Analysis
• Data Analysis
• Strategy
• Program Management
• Talent Management
• Pmo
• Leadership
• Sharepoint
• Training