Job Details

Senior Auditor - IT Infrastructure (Hybrid or Remote)

M&T Bank
Buffalo, New York, United States

Ideally this position will be located in Buffalo, NY but it may be located in another location within the U.S. and have a hybrid or a remote work arrangement.


Opportunity: (Open to remote)
This position is responsible for executing internal audit examinations over the Bank s Information Technology (IT) Engineering, Operations, Governance, Risk Management, and Architecture functions ensuring the timely and professional execution of the examinations in accordance with professional standards.


  • Plan, coordinate and maintain full ownership over execution of IT platform and infrastructure audit examinations and validation procedures in accordance with the Internal Audit Department s audit methodology and professional standards. Work with the IT Infrastructure Audit Manager to establish appropriate budgets and timeframes for these examinations;

  • Independently document and communicate recommendations to Bank Management in order to improve internal controls and reduce risk to the organization;

  • Supervise other IT Audit staff as needed, per audit engagement;

  • Responsible for becoming intimately familiar with the organizational structure for the Bank s Technology organization. Also responsible (in collaboration with the IT Infrastructure Audit Manager) for understanding technology risks that may exist across the enterprise and ensuring the Audit Department s overall Audit Plan effectively accounts for these risks;

  • Responsible for actively working with the Enterprise Security Audit team to ensure cybersecurity risks are accounted for within the scope of infrastructure audits;

  • Function as one of the primary point persons within the IT Audit group responsible for understanding the IT infrastructure, operations, engineering, risk management, architecture and governance functions in the organization. Expected to work with the IT Infrastructure Audit Manager to develop an effective approach to gaining this knowledge;

  • Working with the Infrastructure Audit Manager, keeping abreast of current developments and emerging issues and risks both within the Technology organization and the information technology industry, and apply gained knowledge to audit practices;

  • Responsible for establishing a relationship with the project portfolio manager for the Technology line of business to fully understand the key projects ongoing in the Technology organization. Function as a 'go to' person for the IT Audit group in regards to infrastructure projects and participate on these projects, and other investigations and initiatives as necessary;

  • Directly communicate with Senior, Middle and Line Management within the Technology organization, as well as External Auditors as needed, and maintain and enhance these professional relationships; and

  • Maintain ongoing communication with the 1st and 2nd line Technology Risk Management/Oversight organizations to align assurance activities, share risk information, and establish ongoing reliance approaches (as applicable)

Education and Experience Required:

  • Bachelor s degree, preferably in Accounting, Business, Finance, Technology, Cybersecurity, Mathematics, Statistics or other related technical field and 3 years of relevant work experience. In lieu of degree, a combined minimum of 7 years higher education and/or work experience including 3 years of relevant work experience.

  • Ability to develop and coach others.

  • Strong analytical and organizational skills.

  • Strong written and verbal communication skills.

Education and Experience Preferred:

  • Related certifications (CPA, CIA, CISA, CAMS or similar).

  • MBA or Master s degree in an appropriate field.

  • Strong experience in infrastructure auditing (preferably in the banking/financial services sector);

  • Working knowledge and experience in auditing the following technologies:

    • Windows Server, Unix/Linux Server, Cisco UCS, VMWare virtualization systems, Storage Area Network (SAN) environments, enterprise data backup solutions, Microsoft Exchange email systems, network infrastructure systems (routers, switches, DNS, DHCP, Load Balancing systems, LAN/WAN and Internet circuit infrastructure), phone systems (including VOIP), wireless network infrastructure, network management systems, SQL Server, Oracle, and DB2 database environments, mobile infrastructure systems, middleware technologies, VPN solutions, mainframe systems and related security products, file transmissions solutions, and/or production job scheduling systems. Also would be helpful having experience with software defined technologies across infrastructure, emerging database technologies (i.e. NoSQL) and experience auditing enterprise data management technologies such as data warehousing, master data management and data lake tech.

  • Working knowledge of cloud computing risks and related controls frameworks

  • Working knowledge of modern delivery practices and supporting tech (agile, DevOps tools, etc.)

  • Working knowledge of API Management and associated security risks

  • Certification such as CISSP, CCSP, as well as other technical vendor certifications is a definite asset;

  • In-depth knowledge of ITIL Standards and core IT services such as change, problem, incident, and asset management;

  • Understanding of regulatory requirements as they relate to technology in the financial services industry;

  • Excellent verbal and written communication skills. Ability to convey complex conceptual information/ideas on issues requiring extensive interpretation and opinion. Experience in applying appropriate discretion when dealing with sensitive issues and conveying technical concepts in an easy to understand manner;

  • Proven ability in managing multiple audits, projects and initiatives simultaneously under tight deadlines;

  • Proven leadership skills, with the ability to develop and motivate teams;

  • Strong PC skills;

  • Strong organizational and resource management skills; and

  • Ability to travel.


Buffalo, New York, United States of America

Send application

Mail this job to me so I can apply later

Apply With CV

You are not logged in. If you have an account, log in to your account. If you do not have an account, why not sign up? It only takes a minute!

latest videos

Upcoming Events