IT Lead Auditor - Technology Infrastructure and Operations (Cybersecurity)

Location: Hybrid, 4 days per week onsite and 1 day remote, from Buffalo, NY; Bridgeport, CT; or Wilmington, DE. Must be within a commutable distance or willing to relocate.

Salary: $89,600–$149,300 annual USD

Company

M&T Bank is a financial services organization with banking and technology operations.

What you will do

• Lead and execute audits across IT engineering, operations, governance, risk management, and architecture from planning through reporting.
• Perform annual risk assessments, continuous auditing and monitoring, product delivery assessments, investigations, retrospective reviews, and remediation validations.
• Write audit findings that identify risks and root causes, and present sensitive and complex conclusions to bank management.
• Partner with business stakeholders and Risk Management while maintaining audit independence.
• Use data analytics and automation techniques throughout audit and assurance activities.
• Coach, develop, review, and oversee the work of auditors and new hires.

Requirements

• Bachelor’s degree and at least 5 years of relevant experience, or 9 years of combined higher education and work experience including 5 years of relevant experience.
• At least 1 year of leadership experience, including coaching and developing others.
• Experience with internal audit methodology, internal controls, and evaluating control adequacy.
• Strong analytical, critical-thinking, leadership, verbal, and written communication skills.
• Experience presenting complex findings, influencing change, handling multiple projects, and defending audit conclusions.
• Must work in a hybrid arrangement from Buffalo, Bridgeport, or Wilmington, within commuting distance or with willingness to relocate.

Nice to have

• Bachelor’s or master’s degree in accounting, business, finance, technology, cybersecurity, mathematics, statistics, or a related field.
• CIA, CPA, CISA, CISSP, cloud, or similar professional certification.
• Financial services and infrastructure auditing experience.
• Knowledge of server, virtualization, database, middleware, storage, network, firewall, VPN, backup, mainframe, and security systems auditing.
• Knowledge of cloud risks, control frameworks, DevOps, API security, ITIL, and technology regulations in financial services.

Culture & Benefits

• Work within the bank’s risk appetite, regulatory standards, policies, and internal control framework.
• Support engagement, belonging, and the M&T Bank brand.
• Contribute to division priorities and continuous improvement of assurance methodologies.
• Full-time employment with compensation informed by knowledge, skills, and experience.