Ronald Roosevelt P.

About Ronald Roosevelt P.

From my early days managing end-user access requests for contact center systems to leading large-scale regulatory and risk management programs, I’ve built a career focused on securing enterprise environments, driving compliance, and embedding sustainable risk practices across financial services.With 20+ years of experience, I bring deep expertise in third-party risk, regulatory compliance, identity governance, fraud prevention, and operational risk. My leadership spans global banks, fintechs, and regulatory consortiums—translating complex requirements into business-aligned solutions that support security, accountability, and resilience.Key areas of focus include: • Identity & Access Management (IAM): Managing user entitlement via SailPoint IIQ to ensure secure provisioning, policy enforcement, and audit readiness • Third-Party Risk Management: Building oversight frameworks that align with OCC Heightened Standards and drive vendor accountability • Regulatory Compliance: Leading programs aligned with SOX, GLBA, FFIEC, Dodd-Frank, NIST, CMMC, GDPR, and ISO 27001 • Fraud & Identity Theft Prevention: Executing enterprise-wide initiatives compliant with FACTA and FFIEC AIBE guidelines • Operational & Technology Risk: Designing scalable testing programs, real-time risk reporting, and remediation strategies • Exams & Audit Engagement: Serving as a regulatory liaison and leading enterprise response and corrective action planningI approach risk and compliance not just as functions, but as strategic enablers that protect organizations and fuel responsible growth. If you’re building or strengthening enterprise risk, IAM, or compliance capabilities—let’s connect.

Experience

1. VP, Operational Risk Manager - Third Party

   Citizens

   Jun 2025 — Present

   As an Operational Risk Manager focused on Third-Party oversight, I serve as an independent risk partner within Citizens\' Operational Risk Management framework. My role is centered on identifying, assessing, and challenging third-party risks across the enterprise to ensure alignment with regulatory expectations and internal risk appetite.I collaborate closely with first-line business units, risk partners, and governance stakeholders to ensure a consistent, proactive approach to managing third-party relationships. My work is key to safeguarding Citizens from potential financial, reputational, and operational harm stemming from third-party exposure.Core Responsibilities Include:Providing independent oversight and credible challenge of third-party risk management activities conducted by the first line of defense.Identifying and evaluating third-party risks across operational processes and business lines.Developing and recommending enhanced controls to mitigate identified risks.Ensuring adherence to internal policies, regulatory requirements, and third-party governance standards.Partnering with cross-functional teams to strengthen third-party risk practices and drive operational resilience.Monitoring key risk indicators (KRIs) and reporting risk trends to senior leadership for informed decision-making.Key Skills & Tools:Third-Party Risk Management (TPRM)| Operational Risk | Risk Control Self-Assessments (RCSA)Policy Governance | Enterprise Risk Frameworks | Issue ManagementStakeholder Engagement | Risk Appetite Alignment | Regulatory Compliance (OCC, FFIEC)This role allows me to bring together strategic thinking, regulatory insight, and cross-functional leadership to help the bank manage third-party risk in an increasingly complex vendor and fintech environment.