Overview In this role you lead IT-focused audits and assurance activities to strengthen risk governance across Engineering, Operations, Governance, Risk Management and Architecture. You collaborate with stakeholders to deliver high-quality findings and drive remediation while maintaining independence. You'll apply data analytics and automation to audits and coach a team of auditors, shaping assurance in a dynamic banking environment. This position blends leadership with hands-on risk assessment and regulatory considerations to protect the bank and its customers.
Responsibilities- Lead audits from planning to reporting and ensure timely, high-quality deliverables
- Plan and execute assurance activities including continuous monitoring, product delivery assessments, and investigations
- Write clear audit findings with root-cause analysis and communicate results to management
- Partner with stakeholders to maintain independence while driving risk awareness
- Incorporate data analytics and automation across audit phases
- Coach and supervise auditors and new hires
- Adhere to risk and regulatory standards and manage escalation of issues
- Promote belonging and alignment with the M&T Bank brand
Key requirements- Bachelor's degree or equivalent with minimum 5 years of relevant experience (or 9 years total with education)
- Minimum 1 year of leadership experience
- Experience with internal audit methodology
- Solid understanding of internal control concepts and evaluating control adequacy
- Strong leadership and coaching skills
- Proven analytical and critical thinking abilities
- Excellent verbal and written communication skills
- Experience presenting findings to management and influencing change
- Ability to manage multiple projects simultaneously
- Experience challenging status quo and defending conclusions
- Preferred: domain knowledge in financial services and IT infrastructure auditing
- Preferred: relevant certifications (CIA, CPA, CISA, CISSP) and knowledge of cloud, ITIL, DevOps, API management
- leadership
- communication
- analytical thinking
- internal controls
- data analytics
- cloud computing risks and controls
