IT Audit Manager – Institutional Services and Wealth Management (ISWM) Domain

Location: Hybrid, 4 days per week onsite and 1 day remote, based in Buffalo, NY; Wilmington, DE; Bridgeport, CT; Boston, MA; New York City, NY; or Iselin, NJ. Candidates must be within commuting distance or willing to relocate.

Salary: $107,500–$179,100 annual, USD.

Company

M&T Bank provides banking and financial services, including Institutional Services and Wealth Management.

What you will do

• Manage risk assessments and determine annual IT audit coverage for the Institutional Services and Wealth Management domain.
• Lead all phases of risk-focused IT audits, including planning, execution, continuous auditing, and validation.
• Lead auditors in identifying, assessing, and testing technology controls, cybersecurity risks, and regulatory requirements.
• Use data analytics and technology-enabled audit techniques to improve risk identification and audit execution.
• Advise business, technology, and risk stakeholders on audit findings, control enhancements, and remediation.
• Communicate audit status and emerging risks to audit leadership, executives, external auditors, and regulators.

Requirements

• Bachelor’s degree in accounting, business, finance, technology, cybersecurity, mathematics, statistics, or a related field.
• At least 7 years of relevant experience, including 2 years of supervisory or managerial experience.
• Strong leadership, coaching, project management, analytical, communication, negotiation, and critical-thinking skills.
• Ability to maintain independent judgment and objectivity in senior-level risk and control discussions.
• Ability to work four days per week onsite at one of the specified U.S. locations.
• Knowledge of technology and cybersecurity regulatory guidance, professional auditing standards, and internal audit methodology.

Nice to have

• MBA or master’s degree in an appropriate field.
• Three to five years of IT audit experience and seven to ten years of people leadership experience.
• CIA, CISA, CISSP, CCSP, or a similar professional certification.
• Financial services experience, particularly in technology risk, IT controls, cybersecurity, or data governance for capital markets or wealth management.

Culture & Benefits

• Opportunity to influence risk outcomes across the Institutional Services and Wealth Management domain.
• Collaboration with senior leaders, risk partners, audit colleagues, external auditors, and regulatory agencies.
• Responsibilities include coaching, mentoring, cross-training, performance evaluations, and talent development.
• Focus on an inclusive, collaborative work environment and a strong control culture.