IT Audit Manager – Institutional Services and Wealth Management (ISWM) Domain

Overview

• This IT Audit Manager role will be responsible for managing, leading, and executing IT assurance activities over the technology environment supporting the Institutional Services (Capital Markets) and Wealth Management (ISWM) domain, while coaching team members to deliver high‑quality audit results in line with department and industry standards and expectations. The IT Audit Manager will oversee ongoing risk assessment, audit execution, and continuous monitoring specific to the technologies supporting the ISWM business.  The role will be expected to regularly consult with Audit Leadership responsible for the Cybersecurity and Technology domains to stay informed of the Bank’s overall IT strategy and the audit results in these domains, to influence and strengthen their work product.  As a member of the Audit Management Team, this leadership role supports continued enhancements to audit methodology, ongoing stakeholder engagement, talent management, and the overall promotion of the Audit Department within the organization.

Key Responsibilities

Audit Execution & Risk Coverage

• Support the department’s risk assessment process and development of the annual audit plan, with primary accountability for determining IT audit coverage across the ISWM domain.
• Stay current on evolving industry practices, regulatory guidance, and emerging technology and cybersecurity risks impacting the ISWM businesses
• Independently manage all phases of the audit process—including planning, execution, continuous auditing, and validation procedures—in a risk‑focused manner for assigned audit entities, ensuring independence and adherence to department and professional industry standards.
• Lead a team of auditors in the identification, assessment, and testing of key IT controls impacting the ISWM domain. 
• Consult with Commercial, Technology, and Risk Management stakeholders regarding risk and control matters. This includes proposing solutions to audit findings, recommending control enhancements, and representing Internal Audit on cross‑functional working groups as appropriate.
• Manage multiple audit engagements and competing priorities concurrently in an efficient and effective manner with minimal oversight.
• Lead teams in incorporating data analytics and technology‑enabled audit techniques to enhance risk identification and audit execution throughout all phases of the audit lifecycle.
• Clearly demonstrate visible support for the department’s strategic objectives.

Leadership, Decision Making, and Stakeholder Management

• Exercise strong independent judgment, initiative, and critical thinking in ambiguous or complex risk scenarios.
• Communicate audit status, emerging risks, and significant issues clearly and proactively to audit leadership and business executives, following a “no surprises” philosophy.
• Build trusted, productive relationships with ISWM and Technology leaders, risk partners, and audit colleagues while maintaining independence and objectivity.
• Demonstrate political acuity, sound decision‑making, and sensitivity to organizational and cultural dynamics.
• Actively lead and support the advancement of Internal Audit’s strategic objectives and reputation as a trusted risk advisor.

Talent Development and Knowledge Sharing

• Coach, mentor, and oversee audit team members, tailoring development approaches based on experience and skill level, including building capability in assessing technology risks within ISWM audits.
• Actively contribute to department‑wide talent development, including cross‑training auditors on ISWM technologies.
• Partner with the Audit leadership team on staffing, performance evaluations, promotions, compensation recommendations, and performance management for direct reports.

Governance, Risk, & Compliance

• Adhere to all company policies, risk management frameworks, and regulatory standards applicable to audit and operational risk.
• Support a strong control environment, including timely remediation of internal and external audit issues and regulatory findings.
• Champion an inclusive, collaborative work environment that reflects the M&T Bank brand and values.
• Perform other related duties as assigned.

Scope of Responsibilities

• Responsible for the timely delivery of high‑quality, value‑added audit and assurance services across the technology environment supporting the Institutional Services and Wealth Management businesses, consistent with Audit Committee expectations and regulatory standards.
• Demonstrate deep working knowledge of technology/cybersecurity regulatory guidance and examination expectations and support Internal Audit readiness for regulatory reviews and examinations.
• Ensure ongoing conformance with professional auditing standards and internal audit methodology.
• Regularly communicate with Senior, Middle, and Line Management, External Auditors, and periodic engagement with regulatory agencies.

Supervisory / Managerial Responsibilities

• This position has direct supervisory responsibility for selected audit team members and may provide coaching or oversight to audit professionals across the ISWM audit team.

Education and Experience Required

• Bachelor’s degree, preferably in Accounting, Business, Finance, Technology, Cybersecurity, Mathematics, Statistics, or a related field, and 7 years of relevant experience, including 2 years of supervisory or managerial experience.
• Strong leadership skills with demonstrated ability to develop and coach others.
• Excellent verbal and written communication skills.
• Strong project management, analytical, and interpersonal skills with the ability to exercise sound judgment and critical thinking.
• Effective negotiation skills and the ability to maintain independent viewpoints in senior‑level discussions.

Preferred Qualifications

• MBA or Master’s degree in an appropriate field.
• Minimum 3-5 years of IT Audit Experience
• Minimum 7-10 years of People Leadership Experience
• Professional certifications such as CIA, CISA, CISSP, CCSP or similar.
• Financial Services industry experience preferred.
• Prior exposure to technology risk, IT controls, cybersecurity, or data governance supporting the Global Capital Markets or Wealth Management businesses is preferred.

Why This Role

• This role offers the opportunity to influence risk outcomes across the ISWM domain, partner with senior leaders, and play a critical role in protecting the organization while enabling responsible growth. It is ideal for an experienced professional seeking broader exposure, strategic impact, and visible leadership within a high‑performing Internal Audit function.