IT Audit - Lead Auditor

Overview

Leads and executes audits across their assigned domain. Responsible for overseeing and executing annual risk assessments, continuous auditing, and remediation plan validations. Communicate audit progress and findings to Bank management and oversee Auditors (as applicable) on assigned audit activities.

• Lead and execute audits of enterprise data management, data governance frameworks, data quality controls, and finance technology platforms (e.g., general ledger, sub-ledgers, reconciliation tools, reporting systems).
• Assess data governance and data lifecycle controls, including data lineage, metadata management, master data management, and compliance with regulatory requirements (e.g., BCBS 239, GDPR, CCPA).
• Evaluate finance technology controls, including system development life cycle (SDLC), change management, access management, and automated controls within financial applications.
• Perform risk-based assessments of data platforms (data lakes, warehouses, ETL processes) and finance technology solutions (ERP, reporting tools, cloud-based financial systems).
• Incorporate data analytics and automation techniques to identify anomalies, validate data integrity, and enhance audit coverage.
• Write clear, risk-focused audit findings that identify root causes and recommend actionable remediation steps.
• Partner with stakeholders in Finance, Technology, Data Governance, and Risk Management to understand processes and emerging risks while maintaining independence.
• Stay current on emerging risks in data governance, data privacy, cloud technology, and financial systems.
• Coach and mentor team members, reviewing work papers and ensuring adherence to internal audit methodology and professional standards.

This position leads and executes assurance activities, maintains relationships, and communicates with Bank management, and oversees Auditors. The position ensures activities are in conformance with professional auditing standards. The jobholder reports to an Audit (Senior) Manager.

• Bachelor’s degree and a minimum of 5 years’ relevant work experience, or in lieu of a degree, a combined minimum of 9 years’ higher education and / or work experience, including a minimum of 5 years’ relevant work experience
• Minimum of 1 year’s leadership experience
• Experience with internal audit methodology
• Solid understanding of internal control concepts
• Experience evaluating adequacy of the controls
• Strong leadership skills
• Experience coaching and developing others
• Proven analytical skills
• Proven critical thinking skills
• Excellent verbal and written communication skills
• Experience presenting sensitive and complex findings to business management and influencing change
• Proven ability to handle multiple projects at the same time

• Bachelor’s degree in Accounting, Business, Finance, Technology, Cybersecurity, Mathematics, Statistics, or related technical field
• MBA or Master’s Degree in an appropriate field

• CISA
• CIA
• CPA
• CDMP (Certified Data Management Professional)
• or equivalent.

• Proficiency in SQL, Python, or other data analytics tools
• Experience with visualization tools like Tableau or Power BI

• Strong understanding of data governance frameworks, data privacy regulations, and finance technology platforms (e.g., Oracle Financials, SAP, Workday)

• Familiarity with cloud environments (AWS, Azure, GCP) and related security controls

• Awareness of SOX, BCBS 239, GDPR, and other relevant regulations

• Excellent communication, stakeholder management, and ability to translate technical risks into business impact

Buffalo, New York, United States of America

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $89,600.00 - $ (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.