The Audit Director - AI Technology, Cyber, Data and GenAI Engineering is a senior level management position, reporting to the Chief Auditor Artificial Intelligence (AI) Assurance, responsible for managing a team of audit professionals with an overall objective to strategically direct audit activities and assessments of the risk and control environment for the adoption of AI/GenAI, specifically related to AI Technology, Cyber, Data and GenAI Engineering.
This role will primarily focus on AI Technology, Cyber, Data and GenAI Engineering with the overall objective of this role to ensure that Citi Internal Audit's approach to AI to position Citi IA as the leading IA function in the financial services industry.
Citi IA is a dynamic global function of over 2,500 professionals located across more than 60 countries, covering Citi's global businesses and service to clients and customers through its network in 98 countries. Through a culture of continuous improvement, Citi IA is focused on maintaining its position as a best-in-class IA function and is committed to investing in people, learning and development, innovation, and methodology programs. The Internal Audit mission is to provide independent, objective, reliable, valued and timely assurance to the Board, senior management and regulators of Citigroup and Citibank (and its subsidiaries), over the effectiveness of culture, ethical conduct, governance, risk management, and controls that mitigate current and evolving risks and to enhance the control environment. IA is a change agent within Citi to enhance the control culture of Citigroup worldwide and therefore support senior management decision making around the globe.
Citi operates in over 100 countries and provides consumers, corporations, governments, and institutions with a broad range of financial services and products. Citi strives to create the best outcomes for clients and customers with financial ingenuity that leads to solutions that are simple, creative, and responsive.
Responsibilities:- Develop the strategy and direct the execution of a portfolio of concurrent assurance activities relating to AI Technology, Cyber, Data and GenAI Engineering, of high quality, within budget, and within the expected timelines.
- Act as a trusted subject matter experts on AI Technology, Cyber, Data and GenAI Engineering in financial services across the IA team.
- Partner with IA Technology and Business Enablement team to scale AI assurance across IA work programs.
- Lead and support AI audit engagements, ensuring that AI/GenAI systems are assessed against good architectural practices, security and safety design applicable to AI, GenAI and agentic AI.
- Assessing GenAI platforms and tooling including vector databases, storage, orchestration frameworks, and GenAI-related infrastructure. This covers GPU and CPU usage patterns, compute and token cost optimisation, efficient resource utilisation, plugins and GenAI API ecosystems, infrastructure for evaluations and testing, version control, GenAI system lifecycle management, sandboxing environments, and promotion from development to production.
- Assessing security and safety controls for AI, GenAI and agentic AI implementation. This will include reviewing cyber security controls, use-cases specific guardrails.
- Assessing approaches for red-teaming, safety testing, alerting.
- Assessing suitability of testing, reviews and validation of AI, GenAI and agentic AI from infrastructure, cyber security point of view.
- Assessing internal and external integration, use of AI / GenAI based APIs, gateways from stability, security point of view
- Assessing GenAI observability and monitoring focusing on telemetry specific to GenAI and agentic systems, including per-prompt traces, tool-call audit trails, safety events, and dashboards/alerts with immutable log retention.
- Evaluating resilience, disaster recovery of AI, GenAI and agentic systems, focusing on failure scenarios, recovery procedure. Ensuring AI, GenAI and agentic systems are designed to be resilient and meeting business RTO and RPO requirements.
- Evaluating data pipelines, retrieval systems, and agentic workflows with attention to data integrity, privacy enforcement, misuse prevention, access management, encryption, resilience and recovery, and robustness under adversarial conditions such as data poisoning and denial-of-service attacks.
- Assessing data engineering, quality, and lineage across structured and unstructured data, including governance and lifecycle management of data sources and outputs, with mechanisms such as watermarking.
- Ensure timely delivery of comprehensive regulatory and internal audit issue validation, including issues arising from other external parties.
- Evaluate the adequacy and effectiveness of internal AI governance policies, adherence to AI/GenAI related laws and regulations, and the robustness of AI-related ethical or compliance incident response frameworks.
- Attract, develop, and retain talent; recommending staffing levels required to fulfil responsibilities effectively while establishing and adhering to talent management processes and compensation and performance management programs.
- Work across IA to maximize the efficiency and effectiveness of resources.
- Provide local site leadership encouraging engagement and collaboration across all IA organizations.
- Perform control environment assessments and identify thematic issues and trends to improve controls and governance over the identification, measurement, management, and reporting of risks.
- Champion horizon scanning to anticipate new regulatory, ethical, and societal challenges in AI/GenAI and translate them into practical audit priorities.
- Promote auditability by design by advising product and engineering teams on controls, documentation, and governance structure needed to make AI systems inherently auditable.
- Shape the future of AI audit practices by contributing to the development of new assurance methods for emerging risks (systemic bias propagation, synthetic data misuse)
- Support and endorse the Quality Assurance (QA) function of IA, and resolve issues found by QA, improving audit processes and coverage.
- Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable AI/Gen AI laws, rules and regulations (e.g. EU AI Act), adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards.
- Represent IA in relevant governance forums including Boards and Committees.
- Develop and maintain strong working relationships across other IA teams, Management Stakeholders (MSs), and Regulators.
- Build trust through proactive and transparent interactions while maintaining strong relationships with regulators aligned to Internal Audit.
- Engage regularly with MSs to understand emerging risks and help address escalations.
- Pro-actively advise and assist MSs in considering risks and controls. Support the audit team in their interactions with MSs.
- Participate and share relevant knowledge and insight, on an ongoing basis, within and across IA teams, to drive the consistent application of the methodology, consistency of audit opinions, higher efficiency, and improved quality of overall assurance.
Qualifications- Extensive experience in a related role.
- Experience in cyber security, technical architecture, cloud services and integration patters related to AI and GenAI applications
- In-depth understanding of technical architecture, system engineering with AI/GenAI focus
- Preferably with audit experience, subject matter expert in AI Technology, Cyber, Data and GenAI Engineering.
- Related certifications such as Certified Information Systems (CISA), Certified Internal Auditor (CIA), Certified in Risk and Information Systems (CRISC) or similar. AI-related certifications are a plus.
- Executive presence and expert in building and maintaining strong open relationships with executive stakeholders, working as a partner, exerting influence and providing credible challenge in a constructive manner.
- Ability to quickly comprehend the full risk implications of complex global issues, escalate to the appropriate level and provide advice and on pragmatic commercial solutions.
- Outstanding performer, open minded, resilient, agile, energetic, self-starter, articulate and empathetic whilst being confident to deliver opinions to bring about positive outcomes.
- Strong leadership skills including a track record of identifying and developing world class talent.
- Experienced in leading large, dispersed and diverse professional teams.
- Demonstrated success in business, functional and people management.
- Consistently demonstrates clear and concise written and verbal communication.
- Demonstrated ability to remain unbiased in a diverse working environment.
- Effective negotiation skills.
Education- Bachelor's degree/University degree in decision science, computer science, data science, finance, accounting or a related field, or equivalent experience.
- Master's degree preferred.
#NAMInternalAudit
Job Family Group: Internal Audit
Job Family:Audit
Time Type:Full time
Primary Location:New York New York United States
Primary Location Full Time Salary Range:$170,000.00 - $300,000.00
In addition to salary, Citi's offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental & vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.
Most Relevant Skills Control Monitoring, Data Analysis, Industry Knowledge, Issue Management, Laws and Regulations, Professional Standards, Risk Management, Root Cause Analysis.
Other Relevant Skills For complementary skills, please see above and/or contact the recruiter.
Anticipated Posting Close Date:Dec 03, 2025
Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law.
If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi.
View Citi's EEO Policy Statement and the Know Your Rights poster.
Never miss an opportunity! Create an alert based on the job you applied for.
