Director, Enterprise Resilience Audit & Assurance

Citi; Greater London; Hybrid; GBP 150,000 - 190,000; Full time

Benefits offered by this job

Generous holiday allowance 27 days+

Performance-related bonus

Private medical insurance

Employee Assistance Program

Pension plan

Paid parental leave

Exclusive employee discounts

Learning and development resources

Job summary

Citi London is seeking an Audit Director – Enterprise Resilience to lead a global team and direct the resilience audit program. You will map critical services, set impact tolerances, and oversee recovery testing, DR architecture, and third-party dependencies.

The role requires strong regulatory knowledge, executive presence, and experience in large financial institutions. A hybrid work model and competitive salary accompany a broad benefits package.

Qualifications

• Led resilience, technology risk or related assurance programs in G-SIFI or top-tier firms.
• Deep knowledge of end-to-end resilience frameworks and testing.
• Understanding of modern enterprise architectures and cloud platforms.
• Ability to influence senior stakeholders and regulators.

Responsibilities

• Develop and maintain resilience assurance strategy aligned to regulatory expectations.
• Direct end-to-end delivery of Enterprise Resilience audit portfolio within budgets and standards.
• Act as SME on Enterprise Resilience risks and controls across IA.
• Collaborate with IA tech, cyber and risk teams to scale resilience coverage.
• Lead resilience-related regulatory examinations and remediation programs.

Skills

Operational resilience

Technology risk

Disaster recovery

Cyber resilience

Regulatory knowledge

Executive stakeholder management

Leadership

Education

Bachelor's degree in computer science or engineering

Certs: CISA, CISSP, CSSP, CRISC, CBCI/MBCI advantageous

Tools

AWS

GCP

Azure

Job description

Citi London is seeking an Audit Director – Enterprise Resilience to lead a global team and direct the resilience audit program. You will map critical services, set impact tolerances, and oversee recovery testing, DR architecture, and third-party dependencies.

The role requires strong regulatory knowledge, executive presence, and experience in large financial institutions. A hybrid work model and competitive salary accompany a broad benefits package.