Audit Director – Technology Enterprise Resilience

Overview

Envisioned as the senior lead for Enterprise Resilience within Citi’s Internal Audit, you will shape and oversee resilience risk coverage across global business services and technology. You will direct audits, provide expert guidance on resilience controls, and collaborate with cross-functional teams to strengthen recovery, catastrophe preparedness, and third-party risk. The role offers high-impact work with regulators and senior leadership, shaping Citi IA’s position as an industry-leading function in resilience. You will mentor talent and drive continuous improvement.

Pay / Benefits

• Generous holiday allowance starting at 27 days and bank holidays
• Discretionary annual bonus
• Private medical insurance
• Pension Plan
• Learning and development resources
• Employee assistance program

Responsibilities

• Develop and maintain the resilience assurance strategy aligned to regulatory expectations and technology changes
• Lead end-to-end delivery of the Enterprise Resilience audit portfolio, ensuring quality, budget adherence, and compliance
• Act as SME on Enterprise Resilience risks across the IA team
• Partner with IA technology, cyber, third-party risk and business audit teams to scale resilience coverage
• Evaluate critical business services mapping and impact tolerances
• Assess design and execution of severe-but-plausible scenario testing and test conditions
• Evaluate disaster recovery architecture, failover testing, and data restoration capabilities
• Assess resilience of underlying infrastructure including data centres, cloud, network and single points of failure
• Evaluate third-party and intragroup dependency management and exit planning
• Assess incident and crisis management, regulatory notification, and post-incident learning
• Lead resilience-related regulatory examinations and remediation programmes
• Champion horizon scanning for emerging resilience threats and methods
• Develop and retain talent in the resilience team
• Support QA functions and improve audit processes and coverage
• Maintain strong working relationships across IA teams and stakeholders

Key requirements

• Strong track record leading resilience, technology risk, disaster recovery, cyber resilience, or third-party risk assurance programs in a G-SIFI or top-tier firm
• Strong knowledge of end-to-end resilience frameworks and testing
• Understanding of modern enterprise architecture including cloud platforms (AWS, GCP, Azure) and zero-trust security
• Executive presence with ability to influence senior stakeholders and regulators
• Proven track record building and developing global teams
• Experience leading large-scale audit or assurance portfolios across global organizations
• Solid judgement, independence, integrity in a highly regulated environment
• Knowledge of global resilience regulations (UK PRA/FCA SS1/21, PS21/3, DORA, etc.)
• Experience with regulatory examinations and remediation closures
• Bachelor’s degree in computer science, engineering, or equivalent
• Professional certifications such as CISA, CISSP, CSSP, CRISC, CBCI/MBCI are advantageous

• Executive presence
• Influence and stakeholder management
• Communication with boards and regulators
• Operational resilience
• End-to-end mapping and impact tolerances
• Severe-but-plausible scenario testing

…