Global SOX Program Office Lead
Listed on 2026-03-08
-
Finance & Banking
Financial Compliance, Risk Manager/Analyst
Citi’s mission is to serve as a trusted partner to our clients by responsibly providing financial services that enable growth and economic progress. Our core activities are safeguarding assets, lending money, making payments and accessing the capital markets on behalf of our clients. We have more than 200 years of experience helping our clients meet the world’s toughest challenges and embrace its greatest opportunities.
We are Citi, the global bank — an institution connecting millions of people across hundreds of countries and cities.
Diversity is a key business imperative and a source of strength serve clients from every walk of life, every background and every origin. Our goal is to have our workforce reflect this same diversity at all levels. Citi has made it a priority to foster a culture where the best people want to work, where individuals are promoted based on merit, where we value and demand respect for others and where opportunities to develop are widely available to all.
Citi seeks an experienced leader to join our Controllers Governance, Controls & Transformation function, focusing on leading the global SOX Program Office that provides oversight of Citi’s compliance with the Internal Control over Financial Reporting (ICFR) requirements under the SOX Act of 2002, SEC and FDICIA regulations, based on COSO 2013 Internal Control - Integrated Framework, supporting the quarterly and annual CEO and CFO SOX/FDICIA certifications.
Responsibilities- Oversight and management of the end-to-end SOX/FDICIA Program activities including but not limited to: financial reporting risk assessment & scoping, risk & control identification, ongoing oversight of control inventory, review of management’s self-assessment, evaluation of control gaps and issues, tracking deficiencies remediation, management attestations/certifications, compilation and presentation of quarterly/annual results and metrics to senior management, second and third line, external auditors, regulators, and supporting periodic updates to senior risk and control oversight committees (e.g., Citigroup Inc.
10‑Q/K and Citibank, N.A. Disclosure Committees, Citigroup Inc./ Citibank, N.A. Audit Committees, Central Controls Committee) - Act as a core Subject Matter Expert and central point of contact for firmwide stakeholders across first, second and third line, external parties (auditors, regulators) on Financial Statement Reporting Risk (FSRR), ensuring adequate governance over internal controls (manual and automated) identified by management to mitigate the Financial Statement Reporting Risk
- Prescribe and enforce SOX/FDICIA program requirements for firmwide in-scope SOX/FDICIA relevant Global Assessment Units, covering SOX/FDICIA process documentation (process flows, narratives, etc.) and walkthroughs, key risk and control identification and documentation, including relevant technology applications, End User Computing (EUC) tools, models, third-parties, etc.
- Provide quality control oversight and challenge of management’s risk and control identification and documentation, as well as Manager’s Control Assessment (MCA) activities related to the SOX/FDICIA controls documented within the Citi’s Risk and Control platform
- Provide guidance, advisory and trainings (defined curriculum and ad hoc) to firmwide SOX stakeholders, including Business/Function Process and Control Owners, SOX Coordinators, In‑Business Control functions, to promote ongoing awareness and understanding of SOX/ICFR requirements, Citi‑specific SOX/FDICIA program expectations, roles and responsibilities, new and emerging risks relevant to financial reporting, etc. to support Citi’s compliance with the SOX/FDICIA requirements
- Provide oversight and guidance to global network of SOX Coordinators (embedded within the In‑Business/Function areas, as well as SOX Program Office) and tracking delivery of program activities across the SOX compliance lifecycle described above (predominantly SOX/FDICIA process, risk & control identification and documentation, ongoing monitoring of inventory changes and control performance)
- Partner with second and third line of defense partners (Operational Risk,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).