Companies across all industries are faced with the urgent need to transform the way they do business, including financial services, but changes abound with governance, security, and culture. A shift in mindset and perspective away from “the way things have always been done” is key to a successful digital transformation and to providing the frictionless customer experience banks and other financial services businesses strive to offer.

To stay competitive in the wide-ranging fintech landscape, says Michael Ruttledge, chief information officer and head of technology services at Citizens Financial Group, banks need to become more agile and embrace new technologies. He described the five pillars he has used to guide digital transformations at financial institutions: “The first pillar is moving to agile. Second is moving to a more modern architecture. Third is doubling down on the engineering talent at the bank, and fourth is being more efficient and transforming the technology cost structure. Finally, the fifth pillar is maniacally focusing on security and availability.”

Ruttledge says automation is key to delivering the frictionless experience customers want:

“As we’re developing these platforms, we’re looking at where can we automate. We’re trying to make it frictionless for our customers—for instance, we don’t want it to take a long time for them to open an account because of the amount of information they have to enter. Is there data we can pre-populate? Are there notifications and terms and conditions we can automatically route to the customer, as opposed to them having to send in a document with a signature? We’ve used a lot of robotics technology. For example, we’re using chatbots in our call centers to reduce the call volume to be more efficient.”

By creating the right infrastructure from the bottom up, Ruttledge was able to help Citizens better meet customer needs and expectations. Restructuring has also placed the bank in a good position to take advantage of emerging technologies, says Ruttledge:

“Another area we’ve touched on in the network space is 5G, which is at least 10 times faster than 4G. We’re using it now in some of our branches. As a customer comes into the branch, they’re met by a branch member with an iPad, and they’re able to complete an application together. That wasn’t possible before 5G speeds. Looking further ahead, blockchain is another area where there’s a lot of promise for the future. Whether it’s in contracts or in trading, the fact that it gives you immutability in terms of the data could facilitate a number of future use cases in the financial services industry.”

Show notes and references

“Your Company’s Digital Transformation Cannot Wait Until Covid-19 Subsides,” by Michael Ruttledge, CIO, Citizens Financial Group

Full transcript

Laurel Ruma: From MIT Technology Review, I’m Laurel Ruma, and this is Business Lab, the show that helps business leaders make sense of new technologies coming out of the lab and into the marketplace.

Our topic today is digital transformation and cloud adoption. Companies across all industries are faced with the urgent need to transform the way they do business, including financial services, but changes abound with governance, security, and culture. Two words for you: digital shift.

My guest is Michael Ruttledge, chief information officer and head of technology services at Citizens Financial Group. Prior to this role, he was the group CIO at American Express. Michael is a technology leader with more than 20 years of experience in infrastructure and engineering roles within the financial services industry.

This episode of Business Lab is produced in partnership with Infosys Cobalt.

Welcome, Michael.

Michael Ruttledge: Thank you, it’s great to be here.

Laurel: You joined Citizens Financial Group in 2019. What digital transformation lessons from your former employer were you able to bring to Citizens, and how did you prioritize the bank’s technology strategy from there?

Michael: American Express has been working on technology transformation now for about 10 years. When I came to Citizens, a lot of the same things that we’d adopted at American Express I was able to bring to Citizens to start that journey. Technology transformation centers around five core pillars. The first pillar is moving to agile. Second is moving to a more modern architecture. Third is doubling down on the engineering talent at the bank, and fourth is being more efficient and transforming the technology cost structure. Finally, the fifth pillar is maniacally focusing on security and availability. Basically, we moved to an Agile operating model.

One of the lessons learned when I started at Citizens was that we need to bring the business into the transformation process. Digital transformation is as much a business transformation as it is a technology transformation, and we’ve followed that right from the start.

Laurel: It gets to the point of having tech and business at the same table, making decisions together because one always affects the other.

Michael: Absolutely. And it’s more important in an Agile operating environment, where you have teams ideating closely together, trying to deliver capabilities at speed and iterating. That joint partnership is so critical.

Laurel: There must have been a bit of a culture shock, though, to the business as well instituting a maniacal emphasis on security. Not that there wasn’t one before, but you are now firmly putting a stake in the ground saying, “This is our position from here on out.” Did you find a number of organizational culture changes, and how did that affect how you proceeded?

Michael: Early on, we had to get some quick wins. There was a lot of skepticism with the partnership with technologies. It hadn’t been that successful. Releases were taking on average two to three years to get to market, which is very expensive. We’d outsourced a lot of our core engineering muscle. It was in vendors. We didn’t have it within the core team.

It was a big change to get that support from the business and win that back over time. We had to show them that we could deliver very, very fast. And we did that. We brought in new technology. We moved to more of a build-versus-buy mentality when it came to our engineering. We were building components. We were automating. We were delivering much faster.

The business appreciated that, but to your point, it was a culture change for them, too. No longer were they reliant on hundred-page documents with all of their requirements that they could massage over time. Now they had to iterate, and they had to think through the capabilities and act in a very Agile manner. And that was a learning curve. We call them experience owners in the industry, though really I think they’re known as product owners, but essentially, that was a new role people had to learn. We had to hire those people and we had to show them what success looked like for that role.

Laurel: This is absolutely an example of the concept that every business is a technology business. You’re putting that to the test.Because you can’t have two-to-three-year product cycles. That’s impossible. Your competition would just eat you alive.

Michael: Right, absolutely. In the context of competition for banks, it’s not really banks anymore. It’s fintech organizations and large tech companies like Google, Apple, and Amazon that are delivering at speeds we have to compete with. So, it was imperative that we moved to an Agile operating environment, that we brought in new tools that would allow us to do automation and deliver code much faster than we had previously.

Laurel: In the last two years, we’ve all lived through a global pandemic. How did your teams respond to that? Because here you are, a new person, a new force, and then you’re building an entire tech team, and you’re also building them with a very specific perspective—build first, maybe buy later, maybe not at all—but those teams have to have resilience and they have to be able to problem shoot, troubleshoot, and understand problems as they come up.

Michael: The pandemic was interesting because it crystallized everybody on a key set of outcomes. We had to get 15,000 people working from home in the first few weeks of the pandemic. So, that really crystallized action. We set up war rooms. We were deploying laptops in a rapid pace all around the country. The government rolled out their Payment Protection Program. Within a week, we had capabilities up and running, leveraging some of our API infrastructure to be able to provide loans to our customers.

That wouldn’t have been possible in the old environment. In the old environment, we would’ve gone out to a vendor, bought a package, brought it in, tested it, and implemented. The way we’re now developing code, we already have the platform. So, we’re rebuilding on top of that platform and that’s what’s allowing us to get to market so quickly.

Laurel: And that platform, as well as a modern architecture, has to include cloud, right? So that is another shift, to bring cloud services into the fore.

Michael: Absolutely. In some ways, we were slow to the cloud journey. We only started that about 18 months ago, two years ago, but the advantage of that was the industry has moved on from building private clouds in their own data centers to building public clouds with partners like Amazon and Microsoft.

We were able to leapfrog that whole “let’s develop our own cloud and our own data center” and move straight to the public cloud, which is where the industry’s going. If you look at companies like Capital One, they’re 100% in the public cloud now.

So, that gave us an advantage, in that we were able to build all that infrastructure. And frankly, it’s evolved over the last five to seven years, way beyond where it was before. The level of security that’s provided is much enhanced. And we have a concept we call “above the line and below the line.” Below the line is the security that the provider will provide. So, it’s their data center. They’re protecting the physical location. They’re making sure there’s network redundancy. They’re making sure that there is hardware redundancy, etc., but it’s still our role to make sure that above the line, we have the appropriate firewalls and layers of security in place that protect customer data leaving the bank. So it’s a partnership, but we need clearly defined roles and responsibilities, between the vendor and ourselves.

Laurel: When we discuss that above the line and below the line concept, the potential security and privacy concerns are enormous, obviously, for a financial services institution, as they are for any modern business. With this cloud architecture, how else did you address these concerns internally as well, and what was messaging like to your customers?

Michael: Certainly, we’ve always prided ourselves in putting customers first. We let our customers know that their data is protected. And we have layers of security. We use a variety of monitoring tools to monitor data—we monitor who has access to that data, where it is accessed, and if data is sent externally, we monitor that to see the type of data it is and what’s leaving our premises. So, there are myriad controls there.

We also partner with a number of vendors to prevent cyberattacks. We have sophisticated network technology in place so if we do get a denial of service attack, for example, we’re able to cope with that by diverting traffic to the provider.

Laurel: How do you address the talent gap that so many businesses are facing with digital transformation—the shift to cloud platforms, adopting modern architectures, as well as security? There are only so many folks out there. You mentioned autonomous operations. Is that part of the deal?

Michael: That’s a great question. There’s definitely a war for talent, and I would say this year more than any other, we’re certainly feeling it. During the pandemic and post-pandemic, the need for digital transformation skills, the need for data skills, and skills in security have increased phenomenally. We’ve definitely had to think about how to retain our colleagues, look at practices we can put in place to retain our colleagues, and we’ve doubled down on education.

Because we’ve been transforming the bank in terms of the technology landscape, we’ve brought in tremendous amounts of new technology, and our engineers are enjoying learning that new technology. In fact, as an example, we had 263 engineers who just signed up for our AWS certification. We’ve taken 150 of our colleagues through an academy program we created, which was a nine-week full-time hands-on program where they developed and released code. We drank our own champagne, I like to say, because we leveraged our own automated pipeline, our DevSecOps environment, and our own testing environments to give them those skills.

It has been a huge success. We’ve developed over 40 badging programs. And once again, 400 individuals have gone through those programs where they’re now certified in cloud, in full stack engineering, in data, and in cryptography.

Laurel: That’s no small feat, especially in the two years since you’ve been there. So, DevSecOps is development, security, and operations, which is part of that architecture to get businesses to where they need to be in Agile response. That’s where a lot of the autonomous features are coming in. So, you must also be looking out for opportunities in AI and machine learning as well.

Michael: Absolutely. As we’re developing these platforms, we’re looking at where can we automate. We’re trying to make it frictionless for our customers—for instance, we don’t want it to take a long time for them to open an account because of the amount of information they have to enter. Is there data we can pre-populate? Are there notifications and terms and conditions we can automatically route to the customer, as opposed to them having to send in a document with a signature?

We’ve used a lot of robotics technology. For example, we’re using chatbots in our call centers to reduce the call volume to be more efficient. We’ve implemented Robotic Process Automation (RPA) that allows us to automate some of the back-end processes in our operations groups as well, so they can avoid a lot of the manual work they do today.

Laurel: And these are probably just a handful of the new products that Citizens has been able to launch because of the move to the cloud. Internally, are you also seeing avenues to find efficiencies within the company itself, not just for customers?

Michael: Absolutely. We’re automating a lot of manual processes. For example, we’ve developed a new lending service that allows our customers to apply for loans, which was a very manual process before which required a lot of different handoffs, a lot of different spreadsheets, and we’ve been able to automate a lot of that process. With a few clicks, people are able to apply for a student loan, as an example, and our customers don’t have to go through all the information they have to put in the system, but also our operations groups significantly reduce the time they have to do things manually.

Laurel: You mentioned earlier that because of the pandemic, Citizens was able to speed along certain benefits for customers, like the payment program from the federal government. What other new products has Citizens been able to launch because of the move to the cloud?

Michael: That’s a great question. One of the solutions we used for our Paycheck Protection Program (PPP) loans was Salesforce. It’s a SaaS-based solution in the cloud, and we’ve been able to use that to enhance our lead generation. If you think about our mortgage business, our home equity loans businesses, and our auto business, we’re able to use that platform we developed for PPP loans to enhance our sales leads in those areas.

So, once again, it’s an example where, by taking a platform approach, we’ve been able to extend the capabilities to other areas of the bank and reuse some of those APIs or building blocks that we were able to create early on during the pandemic.

Laurel: Salesforce is certainly a great way to keep track of customers and identify how you’re going to acquire them, but I feel like there’s also a more current story that everyone has in their pocket—the mobile phone. How has banking on your phone changed the way that everyone works these days?

Michael: You’re absolutely right. The expectation is that you can do everything on your phone. We rolled out our new mobile online banking system in January of this year, fully cloud native, and once again, reusing some of the building blocks that we built. It has gotten rave reviews—it received a 4.6 rating in the App Store, which is great.

We’re very proud of it. We’re continuing to enhance it. And in fact, some of the capabilities we launched with that, we’re actually extending now to some of our other products. We have a product called Citizens Pay, for instance, and we’re going to launch the mobile app for that and use some of the same capabilities we developed and launched in January. We have a digital bank, and we’re developing the mobile app for that. Once again, it’ll be on the same platform, the same framework as the core mobile app. Allowing us to service our customers and make sure they always have the bank in their pocket is important to us.

Laurel: So, in terms of customer service and how you think the business is now versus when you first joined, what are some of the greatest competitive advantages you’ve seen with your digital transformation?

Michael: Some of it we covered earlier in terms of reducing customer friction. One of the beauties of being able to use APIs and being able to partner with different fintechs is that we’re able to gather information from them that otherwise we would’ve had to obtain manually. For example, a small business customer used to have to send in their tax returns. Well, now I can go to a provider with their consent, and I can bring that data in automatically so they don’t have to send in that statement. Same with income data, with the appropriate consent from our consumers, I can go to a database, a provider, and bring in that data and not have to ask them to send in their payroll stub to prove that they have that data.

There’s so much data that’s available now in the public domain that you’re able to go after, as opposed to manually either entering it or sending it—or worse, faxing it in.

Laurel: Talk about a security breach.

Michael: Yes.

Laurel: I have to say, one of my favorite innovations is the fact that you can now deposit checks without an envelope. It seems amazing to me.

So, one last question to give this a future forward look: what’s next on the horizon for financial institutions, and what emerging technology (we touched on AI and ML a bit) are you seeing taking a large role in the future of banking?

Michael: We’ve scratched the surface with AI and ML. There’s so much more that we can be doing in that space as computers become more powerful, as storage becomes cheaper, where we’re able to store vast amounts of data and we’re able to crunch through that in real time. I see that being really powerful. There’s a lot of data streaming technology now where, as the data comes in, you’re able to gain insights into that data immediately, in real time. I see that as a real game-changer as we move forward in being able to do much more real-time analytics, which I think is big in the credit and risk decisioning space, in the marketing spaces.

Another area we’ve touched on in the network space is 5G, which is at least 10 times faster than 4G. We’re using it now in some of our branches. As a customer comes into the branch, they’re met by a branch member with an iPad, and they’re able to complete an application together. That wasn’t possible before 5G speeds. Looking further ahead, blockchain is another area where there’s a lot of promise for the future. Whether it’s in contracts or in trading, the fact that it gives you immutability in terms of the data could facilitate a number of future use cases in the financial services industry.

A bit further out is quantum computers. It’s something I’m personally very interested in. We’re now up to over a hundred cubits of performance. I think in the next two years, we’ll get to over a thousand. It really changes the game when it comes to data processing. And once again, some of the use cases will be in combating fraud, and also in the credit space where you want to crunch through very large amounts of data very, very fast. It will also break our current encryption algorithms. It’s something from a threat perspective we’re thinking about and partnering with our security team to make sure we’re thinking through our defenses against that.

Laurel: Michael, thank you so much for joining us today on what has been a fantastic conversation on the Business Lab.

Michael: Thank you.

Laurel: That was Michael Ruttledge, chief information officer at Citizens Financial Group, whom I spoke with from Cambridge, Massachusetts, the home of MIT and MIT Technology Review overlooking the Charles River.

This podcast was produced in partnership with Infosys Cobalt. To learn more about cloud-led business transformation, visit technologyreview.com/thecloudhub.

That’s it for this episode of Business Lab, I’m your host, Laurel Ruma. I’m the director of insights of the custom publishing division of MIT Technology Review. We were founded in 1899 at the Massachusetts Institute of Technology, and you could find us in print, on the web, and at event each year around the world. For more information about us and the show, please check out our website at technologyreview.com.

This show is available wherever you get your podcasts. If you enjoyed this episode, we hope you’ll take a moment to rate and review us. Business Lab is a production of MIT Technology Review. This episode was produced by Collective Next. Thanks for listening.

This podcast episode was produced by Insights, the custom content arm of MIT Technology Review. It was not written by MIT Technology Review’s editorial staff.