Audit Consultant – Technology Infrastructure and Operations

Location: Hybrid role based out of Buffalo, New York; Wilmington, Delaware; Bridgeport, Connecticut; or Iselin, New Jersey. Onsite four days per week and remote one day per week. Must live within a commutable distance or be willing to relocate. The posting also lists Clanton, Alabama, United States.

Salary: $107,500–$179,100 annual USD, with the applicable range varying by location.

Company

M&T Bank is a financial services organization with a technology ecosystem spanning engineering, operations, governance, risk management, architecture, cloud, and emerging technologies.

What you will do

• Lead and execute complex, risk-focused technology audits across infrastructure, operations, governance, risk management, and architecture.
• Assess technology risks and internal controls across cloud and colocation environments, compute, databases, networks, storage, mainframes, and IT service management.
• Audit cloud-based controls and architecture, including Microsoft Azure, software-defined infrastructure, and DevOps CI/CD pipelines.
• Analyze complex audit findings, develop pragmatic recommendations, and deliver high-quality audit reports within established budgets and timelines.
• Plan and execute validation procedures for internal audit and regulatory issues requiring subject matter expertise.
• Communicate audit status and issues to senior management, business stakeholders, external auditors, and regulatory agencies while coaching junior audit professionals.

Requirements

• Bachelor’s degree in accounting, business, finance, technology, cybersecurity, or a related technical field, plus 7 years of relevant experience including 2 years of work leadership experience; an equivalent education and experience combination may be accepted.
• Experience auditing compute, database, network, and storage infrastructure risks, technology governance, risk management, modern software engineering practices, mainframe technology, and IT service management.
• Experience auditing controls in cloud-based environments, particularly Microsoft Azure, or assessing cloud architecture.
• Understanding of technology and cybersecurity regulatory requirements in the financial services industry.
• Strong project management, critical thinking, negotiation, independent judgment, and written and verbal communication skills.
• Ability to work onsite four days per week from an approved location in the United States and remain within commuting distance or relocate.

Nice to have

• MBA or master’s degree in a relevant field.
• CISA, CISSP, or a similar certification.
• Financial services industry experience.

Culture & Benefits

• Full-time employment with compensation informed by knowledge, skills, experience, and work location.
• Work in a matrix reporting environment with interaction across audit, business, senior management, external auditors, and regulators.
• Opportunity to coach and mentor junior audit team members.
• Work focused on high-risk technology areas, including cloud computing, DevOps, AI/ML, API governance, and mainframe platforms.