Senior Audit Manager
About the Role
This role is responsible for full ownership of the Audit Division’s assurance product specific to domains within the Technology Division of the Bank. This includes leading a diverse team of IT Audit staff and guiding the risk-based prioritization of continuous monitoring and assurance work over technology infrastructure and operations, enterprise software engineering and platform services, technology service delivery, technology governance, enterprise architecture, and technology risk management.
A proficient understanding of technology operations and related risks and controls within legacy data centers, co-location environments, and public cloud platforms is required as the organization continues its migration of operations to the cloud. This role requires an in-depth knowledge of traditional and modern technology architecture and tooling and both a willingness and aptitude to remain current on emerging technology shifts specific to financial services.
As a member of the Audit Senior Management Team, this leadership role assists in the development and support of the department’s strategic vision, including supporting continued enhancements to audit methodology, ongoing stakeholder engagement, talent management, and overall promotion of the Audit Department within the organization. The role requires ongoing communication with seasoned IT leaders within the Technology Division, having a professional background and experience across various financial services organizations.
Responsibilities
- Own the construct and completion of the Audit Plan for assigned areas of the Technology Domain and demonstrate valued input overall.
- Proactively gather knowledge of the domain and demonstrate understanding within internal meetings and through interactions with Audit Directors.
- Lead presence in audit scoping meetings and contribute to discussions.
- Establish regular communications with the appropriate level of Technology management responsible for the technology within assigned domains.
- Ensure audit teams are timely in their completion of audit work and both draft/final reports, managing report review processes to allow sufficient time.
- Manage staff to ensure end-of-fieldwork dates are consistently met, with risk-based rationale for any exceptions.
- Demonstrate a willingness to execute when required/necessary.
- Display understanding of existing and emerging risks within assigned domains, staying current on emerging technologies and related risks.
- Drive continuous auditing and monitoring activities within assigned domains.
- Proactively manage co-sourced relationships where applicable.
- Support the department’s risk assessment process to determine audit coverage for the technology domain.
- Consult with business stakeholders regarding risk and control matters, proposing solutions to audit findings and recommendations for control enhancements.
- Represent Audit on working groups within the business as appropriate.
- Manage multiple tasks concurrently with minimal oversight.
- Lead audit teams in incorporating data analytics throughout all phases of the audit process.
- Demonstrate visible support for and assist in driving the department’s strategic objectives.
- Deliver clear, concise, and well-written Audit Reports aligned with Audit Manual and Report template expectations.
- Prepare for and drive meetings with management in assigned portfolios and within internal department meetings.
- Ensure ongoing collaboration and alignment with 1st and 2nd line risk groups within assigned portfolios.
- Communicate technical concepts in a manner understandable by non-technical individuals.
- Interact directly with regulators during examinations and MRA/MRIA validations.
- Coach, mentor, and oversee the work of junior audit team members, tailoring the approach based on their skills and experience.
- Actively participate in overall staff development for the department.
- Work closely with the Audit Director concerning staffing, performance appraisals, promotions, salary recommendations, performance management, and terminations for direct reports.
- Establish an environment that promotes psychological safety for the team.
- Demonstrate an ability to understand and value the strengths of each team member.
- Reflect personal responsibility for maximizing team strengths.
Requirements
- In-depth knowledge of traditional and modern technology infrastructure (servers, databases, network and storage infrastructure, cloud technology, middleware/integration services).
- Understanding of modern development and delivery practices, emerging technologies used by financial services organizations, and core technology services and operations.
- Working knowledge of technology risk management frameworks (e.g., CRI, ITIL 4, COBIT).
- Understanding of supervisory expectations and regulations specific to technology risk management practices (e.g., FFIEC IT Handbooks, NYSDFS NYCRR 500, Fed SR-Letters).
- Certifications related to technology risk management, IT Audit, or cybersecurity risk management (e.g., CISSP, CISA, CCSK).
- Bachelor’s degree, preferably in Accounting, Business, Finance, Technology, Cybersecurity, Mathematics, Statistics, or other related technical field.
- 10 years of relevant experience, inclusive of 4 years supervisory/managerial experience.
- Strong judgment, political astuteness, and sensitivity to cultural diversity.
- Strong project management and interpersonal skills, with the ability to make sound decisions independently.
- Effective negotiation skills and a proactive, "no surprises" approach in communicating issues.
- Articulate and effective communicator, both orally and in writing, with an energetic, charismatic, and approachable style.
- Strong leadership skills and ability to develop and coach others.
Scope of Responsibilities
This role reports to an Audit Director and supports the overall direction and execution of the audit plan via high-quality, timely, and value-added audit services that meet the requirements of the Audit Committee and regulatory expectations. This senior role ensures ongoing conformance with professional auditing standards.
The position involves direct communication with Senior, Middle, and Line Management, as well as External Auditors. It requires building strong partnerships with business stakeholders and other audit team members and periodic interaction with external regulatory agencies. The role operates independently with minimal Audit Director oversight to deliver high-quality assurance products on time.
Pay
The pay range for this position is $128,900.00 - $214,900.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.