SOX Co-ordinator (VP)

Overview

In this role you will lead the end-to-end planning and governance of KPMG audits (SSAE-18/SOC 1, SOX Integrated, and statutory audits) for Citi Technology. You will partner with KPMG, technology process owners, and senior leaders to ensure timely evidence delivery and robust risk reporting. You’ll drive continuous control improvement and oversee exam management in a high-visibility, global environment. This is a chance to shape Citi’s technology control maturity and audit readiness at scale.

Pay / Benefits

• 27 days annual leave (plus bank holidays)
• Discretionary annual bonus
• Private medical care & life insurance
• Employee Assistance Program
• Pension plan
• Paid parental leave

Responsibilities

• Lead end-to-end lifecycle of SSAE-18 SOC 1, SOX Integrated, and Statutory Audits for the Technology sector
• Support technology teams in compiling, reviewing, and validating audit deliverables for quality and timeliness
• Conduct root cause analyses of control deficiencies and coordinate corrective action plans
• Provide check and challenge governance to appropriately escalate risks and issues
• Drive continuous process improvement and lessons learned for future audit cycles
• Develop governance frameworks, guidelines, and training programs to streamline exam execution
• Maintain tracking, metrics, and dashboards for real-time audit visibility and remediation status
• Use risk analytics to identify trends and strengthen the technology control environment
• Act as primary liaison for KPMG, internal units, and senior technology leaders to resolve issues and influence decisions

Key requirements

• Substantial experience in technology risk, IT audit, or technology controls in a global financial services setting
• Leading or supervising internal and/or external technology audits
• Deep understanding of SOX GITCs, Application IT Controls, and SSAE-18/SOC 1
• Ability to identify, assess, measure, and manage technology risks and controls
• Familiarity with institutional policies, standards, and procedures
• Excellent verbal and written communication, with experience engaging senior management and auditors
• Strong analytical, problem-solving, and structured decision-making abilities
• Excellent project, time, and stakeholder management in fast-paced environments
• Proficiency in Microsoft Excel, PowerPoint, and Word

• Strong communication and influencing abilities
• Stakeholder management and relationship building
• Analytical mindset and attention to detail
• SOX General IT Controls (GITCs)
• Application IT Controls
• SSAE-18 / SOC 1 exam management frameworks

…