The audit manager is an intermediate level role responsible for performing moderately complex audits and assessments of citi’s risk and control environments in coordination with the audit team. The overall objective is to utilize in-depth subject matter expertise to ensure that the firm meets audit standards and regulations and to work with business leaders to determine solutions for emerging issues.
responsibilities:
1. consistently develop, execute and deliver audit reports in a timely manner, in accordance with internal audit and regulatory standards
2. review and approve the business monitoring quarterly summary and serve as lead reviewer for all reviews
3. collaborate with teams across the business and determine impact on overall control environment and audit approach
4. manage audit activities for a component of a product line, function, or legal entity at the regional or country level
5. leverage a comprehensive expertise to manage a team
6. advise the business on change initiatives, while advancing integrated auditing concepts and technology adoption
7. recommend interventions to issues, propose solutions for risk and control problems, partner with directors and managing directors to develop approaches for broader corporate issues
8. apply in-depth understanding of internal audit standards, policies and regulations to a specific product or function area qualifications.
9. appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.
qualifications:
10. 6-10 years of relevant experience
11. related certifications (cpa, aca, cfa, cia, cisa or similar) preferred
12. effective comprehension of business side of audit function and subject matter expertise regarding technology application
13. effective verbal, written and negotiation skills
14. effective project management skills
15. effective influencing and relationship management skills
16. demonstrated ability to remain unbiased in a diverse working environment
education:
17. bachelor's/university degree, master's degree preferred
18. bases técnicas sólidas:
- redes (segmentación, firewalls, network access control -nac, ids/ips intrusion detections/prevention system, cloud).
- sistemas operativos (windows / linux).
- conceptos de seguridad (gestion de vulnerabilidades, hardening de equipo.
conocimiento de regulación y estándares
-regulación local (cnbv y banxico)
- nist national institute of standards and technology
- pci dss (payment card industry data security standard)
experiencia.
- experiencia practica en realización de auditorías de ciberseguridad internas o externas (no solo de cumplimiento de iso 2700)
- revisión de controles
- entendimiento de riesgos y controles
certificación deseable
- cissp (certified information systems security professional)
- cisa (certified information systems auditor)
------------------------------------------------------
job family group:
internal audit
------------------------------------------------------
job family:
audit
------------------------------------------------------
time type:
full time
------------------------------------------------------
most relevant skills
control monitoring, data analysis, industry knowledge, issue management, laws and regulations, professional standards, risk management, root cause analysis.
------------------------------------------------------
other relevant skills
for complementary skills, please see above and/or contact the recruiter.
------------------------------------------------------