SOX & IT Controls Lead — Hybrid Role

Citi; New York (NY); Hybrid; USD 122,000 - 203,000; Full time

Benefits offered by this job

27 days annual leave

Private Medical Care & Life Insurance

Pension Plan

Learning & Development resources

Job summary

Citi is seeking a VP-level SOX Co-ordinator to lead end-to-end planning and execution for SSAE-18, SOX Integrated, and statutory audits across the Technology footprint. You will partner with KPMG, technology process owners, and senior leadership to ensure timely evidence delivery and robust risk reporting.

The role requires deep SOX controls knowledge, strong leadership, and a track record of improving control environments within a global financial services setting.

Qualifications

• Substantial experience in technology risk, IT audit, or technology control within global financial services.
• Leadership experience in a lead or supervisory capacity for audits.
• Deep understanding of SOX GITCs, Application IT Controls, and SSAE-18 / SOC 1 exam management.

Responsibilities

• Lead end-to-end planning and execution of KPMG SSAE-18 (SOC 1), SOX Integrated, and statutory audits for Citi Technology.
• Coordinate deliverables, reviewing and validating audit artifacts for quality and timeliness.
• Perform root cause analyses and design corrective action plans with control owners.
• Provide governance and escalation oversight per Citi policies.
• Drive continuous process improvement and readiness across technology teams.
• Develop and deliver risk reporting dashboards for senior management.

Skills

SOX GITCs

SOC 1 exam mgmt

Risk Management

Regulatory Policy

Communication

Project Mgmt

Excel/PowerPoint/Word

Education

Bachelor's/University degree, Master's preferred

Job description

Citi is seeking a VP-level SOX Co-ordinator to lead end-to-end planning and execution for SSAE-18, SOX Integrated, and statutory audits across the Technology footprint. You will partner with KPMG, technology process owners, and senior leadership to ensure timely evidence delivery and robust risk reporting.

The role requires deep SOX controls knowledge, strong leadership, and a track record of improving control environments within a global financial services setting.