Audit Director AI Technology, Cyber, Data and GenAI Engineering

Audit Director AI Technology, Cyber, Data and GenAI Engineering

Discover your future at Citi. Working at Citi is far more than just a job. A career with us means joining a team of more than 230,000 dedicated people from around the globe. At Citi, you'll have the opportunity to grow your career, give back to your community and make a real impact.

Job Overview

The Audit Director AI Technology, Cyber, Data and GenAI Engineering is a senior level management position, reporting to the Chief Auditor Artificial Intelligence (AI) Assurance, responsible for managing a team of audit professionals with an overall objective to strategically direct audit activities and assessments of the risk and control environment for the adoption of AI / GenAI, specifically related to AI Technology, Cyber, Data and GenAI Engineering.

This role will primarily focus on AI Technology, Cyber, Data and GenAI Engineering with the overall objective of this role to ensure that Citi Internal Audit's approach to AI to position Citi IA as the leading IA function in the financial services industry.

Citi IA is a dynamic global function of over 2,500 professionals located across more than 60 countries, covering Citi's global businesses and service to clients and customers through its network in 98 countries. Through a culture of continuous improvement, Citi IA is focused on maintaining its position as a best-in-class IA function and is committed to investing in people, learning and development, innovation, and methodology programs. The Internal Audit mission is to provide independent, objective, reliable, valued and timely assurance to the Board, senior management and regulators of Citigroup and Citibank (and its subsidiaries), over the effectiveness of culture, ethical conduct, governance, risk management, and controls that mitigate current and evolving risks and to enhance the control environment. IA is a change agent within Citi to enhance the control culture of Citigroup worldwide and therefore support senior management decision making around the globe.

Citi operates in over 100 countries and provides consumers, corporations, governments, and institutions with a broad range of financial services and products. Citi strives to create the best outcomes for clients and customers with financial ingenuity that leads to solutions that are simple, creative, and responsive.

Responsibilities

• Develop the strategy and direct the execution of a portfolio of concurrent assurance activities relating to AI Technology, Cyber, Data and GenAI Engineering, of high quality, within budget, and within the expected timelines.
• Act as a trusted subject matter expert on AI Technology, Cyber, Data and GenAI Engineering in financial services across the IA team.
• Partner with IA Technology and Business Enablement team to scale AI assurance across IA work programs.
• Lead and support AI audit engagements, ensuring that AI / GenAI systems are assessed against good architectural practices, security and safety design applicable to AI, GenAI and agentic AI.
• Assessing GenAI platforms and tooling including vector databases, storage, orchestration frameworks, and GenAI-related infrastructure. This covers GPU and CPU usage patterns, compute and token cost optimisation, efficient resource utilisation, plugins and GenAI API ecosystems, infrastructure for evaluations and testing, version control, GenAI system lifecycle management, sandboxing environments, and promotion from development to production.
• Assessing security and safety controls for AI, GenAI and agentic AI implementation. This will include reviewing cyber security controls, use-cases specific guardrails.
• Assessing approaches for red-teaming, safety testing, alerting.
• Assessing suitability of testing, reviews and validation of AI, GenAI and agentic AI from infrastructure, cyber security point of view.
• Assessing internal and external integration, use of AI / GenAI based APIs, gateways from stability, security point of view
• Assessing GenAI observability and monitoring focusing on telemetry specific to GenAI and agentic systems, including per-prompt traces, tool-call audit trails, safety events, and dashboards / alerts with immutable log retention.
• Evaluating resilience, disaster recovery of AI, GenAI and agentic systems, focusing on failure scenarios, recovery procedure. Ensuring AI, GenAI and agentic systems are designed to be resilient and meeting business RTO and RPO requirements.
• Evaluating data pipelines, retrieval systems, and agentic workflows with attention to data integrity, privacy enforcement, misuse prevention, access management, encryption, resilience and recovery, and robustness under adversarial conditions such as data poisoning and denial-of-service attacks.
• Assessing data engineering, quality, and lineage across structured and unstructured data, including governance and lifecycle management of data sources and outputs, with mechanisms such as watermarking.
• Ensure timely delivery of comprehensive regulatory and internal audit issue validation, including issues arising from other external parties.
• Evaluate the adequacy and effectiveness of internal AI governance policies, adherence to AI / GenAI related laws and regulations, and the robustness of AI-related ethical or compliance incident response frameworks.
• Attract, develop, and retain talent; recommending staffing levels required to fulfil responsibilities effectively while establishing and adhering to talent management processes and compensation and performance management programs.
• Work across IA to maximize the efficiency and effectiveness of resources.
• Provide local site leadership encouraging engagement and collaboration across all IA organizations.
• Perform control environment assessments and identify thematic issues and trends to improve controls and governance over the identification, measurement, management, and reporting of risks.
• Champion horizon scanning to anticipate new regulatory, ethical, and societal challenges in AI / GenAI and translate them into practical audit priorities.
• Promote auditability by design by advising product and engineering teams on controls, documentation, and governance structure needed to make AI systems inherently auditable.
• Shape the future of AI audit practices by contributing to the development of new assurance methods for emerging risks (systemic bias propagation, synthetic data misuse).
• Support and endorse the Quality Assurance (QA) function of IA, and resolve issues found by QA, improving audit processes and coverage.
• Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable AI / GenAI laws, rules and regulations (e.g. EU AI Act), adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards.
• Represent IA in relevant governance forums including Boards and Committees.
• Develop and maintain strong working relationships across other IA teams, Management Stakeholders (MSs), and Regulators.
• Build trust through proactive and transparent interactions while maintaining strong relationships with regulators aligned to Internal Audit.
• Engage regularly with MSs to understand emerging risks and help address escalations.
• Pro-actively advise and assist MSs in considering risks and controls. Support the audit team in their interactions with MSs.
• Participate and share relevant knowledge and insight, on an ongoing basis, within and across IA teams, to drive the consistent application of the methodology, consistency of audit opinions, higher efficiency, and improved quality of overall assurance.

Qualifications