Senior Audit Manager - Cyber/Information Security

About the role

The Senior Audit Manager role is a Cyber/InfoSec people manager position within the Internal Audit team focused on providing oversight on audit delivery, stakeholder management, and technical input to audit delivery teams globally across the Cyber/IS domain. This role is specifically responsible for helping to lead the management of risk assessment and audit delivery for global Cyber and Information Security audits at Citi.

Responsibilities

• Manage a team of Internal Audit professionals, recruit staff, lead professional development, build effective teams, and manage a budget
• Deliver audit reports, Internal Audit and Regulatory issue validation, and business monitoring and governance committee reports
• Lead reviews for all types of reviews, including the most complex, and review and approve Business Monitoring Quarterly Summaries
• Participate in major business initiatives and proactively advise and assist the business on change initiatives
• Implement integrated auditing concepts and technology, and follow trends in the Audit field and adapt them for the Audit function
• Identify solutions for a variety of complex and unique control issues, utilizing complex judgement and sophisticated analytical thought
• Analyze report findings and recommend interventions where needed, proposing creative and pragmatic solutions to risk and control issues
• Partner with Directors and Managing Directors to develop approaches for addressing broader corporate emerging issues

Qualifications

• 10+ years of experience in a related role
• BA/BS or equivalent; related certifications (CISSP, CISA, CISM, CIA or similar) are a plus
• AI security related certifications will have special consideration
• Project management experience based on specific initiatives such as deep dive reviews, knowledge management, or innovation initiatives
• Subject matter expertise in auditing general and application controls across a variety of technologies and platforms using IS best practices and standards, including the NIST Cybersecurity and Risk Management Frameworks
• Solid business understanding of technology infrastructure products and experience associated with the banking and financial business
• Knowledge and experience in developing and executing IS risk assessments that align to organizational strategies and business objectives
• Works independently with demonstrated experience in managing technology audits and projects according to strict timetables and quality standards
• Demonstrated successful experience in business, functional, and people management
• Effective negotiation skills, a proactive and “no surprises” approach in communicating issues, and strength in sustaining independent views
• Articulate and effective communicator, both orally and in writing, with an energetic, charismatic, and approachable style, well-developed listening skills, and a strong ability to engage a variety of stakeholders — including senior officials, security professionals, regulators, and business executives — on technical audit matters that is audience-appropriate, risk-based, and actionable

Education

• Bachelor’s degree/University degree or equivalent experience
• Master’s degree preferred

Skills

• Controls Assessment
• Data Analysis
• Industry Knowledge
• Issue Management
• Laws and Regulations
• Risk Management Lifecycle
• Root Cause Analysis

Pay

Primary Location Full Time Salary Range: $144,480.00 – $216,720.00. In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards.

Benefits

• Medical, dental & vision coverage
• 401(k)
• Life, accident, and disability insurance
• Wellness programs
• Paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays

Schedule

Full time. Primary location: Irving, Texas, United States.