Lead Audit Director, Enterprise Resilience & Technology

Citigroup; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

Citi seeks an Audit Director - Enterprise Resilience within the Internal Audit Strategy, Innovation & Professional Practices team to lead a global resilience program across Citi's technology and business services.

You will oversee the end-to-end Enterprise Resilience audit portfolio, ensure high-quality delivery, and partner with technology, cyber, and risk teams to strengthen controls and regulatory alignment.

Responsibilities

• Develop and maintain the Internal Audit resilience assurance strategy, ensuring coverage remains aligned to regulatory expectations, emerging risks and the firm’s evolving technology landscape.
• Direct and oversee the end-to-end delivery of the Enterprise Resilience audit portfolio, ensuring all audits, thematic reviews, and continuous monitoring activities are executed with high quality, within approved budgets, and in compliance with IA methodology and professional standards.
• Act as a trusted subject matter expert on Enterprise Resilience risks and controls in financial services across the IA team.
• Partner with IA technology, cyber, third-party risk and business audit teams to scale resilience assurance across IA work programs and avoid duplicative coverage.
• Evaluate the identification of critical and important business services, the completeness and accuracy of end-to-end service mapping, and the substantiation of impact tolerances.
• Assess the design and execution of severe-but-plausible scenario testing, including the credibility of assumptions, the realism of test conditions, and the treatment of results that breach tolerance.
• Evaluate recovery and restoration capability, including disaster recovery architecture, failover and switchback testing, backup integrity, data recovery, and the ability to restore within stated tolerances.
• Assess the resilience of underlying infrastructure, including data centres, cloud platforms, network, capacity management and single points of failure, alongside concentration in providers and locations.
• Evaluate third-party and intragroup dependency management, covering criticality assessment, contractual protections, subcontracting and fourth-party visibility, exit planning and stressed exit, and substitutability.
• Assess incident and crisis management, including detection, escalation, invocation, command structures, regulatory notification, and post-incident learning.
• Evaluate the adequacy and effectiveness of internal resilience governance policies, adherence to applicable resilience laws and regulations across jurisdictions, and the robustness of self-identification and self-assessment processes.
• Lead Internal Audit engagement on resilience-related regulatory examinat

Job description

Citi seeks an Audit Director - Enterprise Resilience within the Internal Audit Strategy, Innovation & Professional Practices team to lead a global resilience program across Citi's technology and business services.

You will oversee the end-to-end Enterprise Resilience audit portfolio, ensure high-quality delivery, and partner with technology, cyber, and risk teams to strengthen controls and regulatory alignment.