Chief Auditor – Artificial Intelligence (AI) Assurance Lead

The Chief Auditor Artificial Intelligence (AI) Assurance Lead is a senior level management position, reporting to the Chief Auditor Artificial Intelligence (AI), responsible for providing independent assurance over the firm’s adoption and use of AI/GenAI, ensuring risks are identified, controls are effective and governance aligns with regulatory, ethical and strategic objectives.  This role will lead and develop a team with overall accountability for directing audit activities and assessments of the risk and control environment for the adoption of AI/GenAI, applying in-depth disciplinary knowledge through value-added perspectives that is in accordance with IA standards, Citi policies, and regulations. 

Critical thinking and executive presentation skills will be important requirements of the role as themes related to risks and issues across the organization will be identified and presented to key stakeholders, such as senior management, the Audit Committee, regulators and external audit functions.  The incumbent requires a wider ranging, yet detailed knowledge of AI Risks including governance, legal, regulatory, cyber, technology, model risk and third party systems as well as a strong understanding of the fundamental risks associated with a large bank. 

The role will entail considerable co-ordination and development of resources, including partnership with business and function audit teams to meet the requirements and will therefore also require strong people management, engagement and communication skills.

As a member of the Leadership team for Audit’s Artificial Intelligence (AI), the incumbent will also play a key role in supporting the broader teams AI Assurance Tooling and Execution mandate.  In addition, the individual is responsible for contributing to the overall development of Internal Audit’s approach to AI to position Citi IA as the leading IA function in the financial services industry.

Citi IA is a dynamic global function of over 2,500 professionals located across more than 60 countries, covering Citi's global businesses and service to clients and customers through its network in 98 countries. Through a culture of continuous improvement, Citi IA is focused on maintaining its position as a best-in-class IA function and is committed to investing in people, learning and development, innovation, and methodology programs. The Internal Audit mission is to provide independent, objective, reliable, valued and timely assurance to the Board, senior management and regulators of Citigroup and Citibank (and its subsidiaries), over the effectiveness of culture, ethical conduct, governance, risk management, and controls that mitigate current and evolving risks and to enhance the control environment.  IA is a change agent within Citi to enhance the control culture of Citigroup worldwide and therefore support senior management decision making around the globe.

Citi operates in over 100 countries and provides consumers, corporations, governments, and institutions with a broad range of financial services and products. Citi strives to create the best outcomes for clients and customers with financial ingenuity that leads to solutions that are simple, creative, and responsive.

Responsibilities

Assurance Strategy & Coverage: 

• Develop and deliver the AI/GenAI assurance strategy covering governance, legal, regulatory, cyber, technology, model risk and third party systems.
• Timely development, risk assessment, execution and periodic refresh of the audit plan and approach for recurring risk-based coverage on AI/GenAI
• Provide independent assessment of the firm’s AI/GenAI governance framework and operating model.
• Review controls across AI/GenAI development, deployment, monitoring and lifecycle management.
• Responsible for the coordination and delivery of high-quality, value-add multiple concurrent risk-based audit plans on time and to specification together with the assurance for AI/GenAI.  Ensuring that the delivery of audit reports are complete, insightful, timely, error free and concise. 
• Engagement with senior stakeholders upon receipt of supervisory letters/other regulatory communications, ensuring adequacy of responses and commitments provided to regulators and appropriateness of action plans to address the substance of the issue raised.
• Confirms timely delivery of high-quality comprehensive regulatory and internal audit issue validation and where determined appropriate issue validation on other remediation actions.
• Support and endorse the IA Quality Assurance (QA) team to address and resolve issues found by QA, improving audit processes and coverage.
• Taking into account emerging and established risks; industry best practices and external frameworks; legal entity and country-level regulatory requirements and an end-to-end view of the