Overview

• The Audit Manager role will be responsible for managing, leading, and executing assurance activities over the Commercial domain and its associated technology, while coaching team members to deliver high‑quality audit results in line with department and industry standards and expectations. The Audit Manager will oversee ongoing risk assessment, control identification, audit execution, and continuous auditing across Commercial business processes, products, and enabling systems. As a member of the Audit Management Team, this leadership role supports continued enhancements to audit methodology, ongoing stakeholder engagement, talent management, and the overall promotion of the Audit Department within the organization.

Key Responsibilities

Audit Execution & Risk Coverage

• Support the department’s risk assessment process and development of the annual audit plan, with primary accountability for determining audit coverage across the Commercial domain, including key products, processes, portfolios, third‑party relationships, and supporting technology platforms.
• Stay current on evolving industry practices, regulatory guidance, and emerging risks impacting commercial credit and lending; proactively advise audit leadership on risk coverage considerations.
• Independently manage all phases of the audit process—including planning, execution, continuous auditing, and validation procedures—in a risk‑focused manner for assigned Commercial audit entities, ensuring independence and adherence to department and professional industry standards.
• Lead a team of auditors in the identification, assessment, and testing of key business, operational, regulatory, and technology risks impacting the Commercial domain, including risks.  This includes the assessment of the adequacy and effectiveness of business controls and supporting IT general controls (ITGCs) as they relate to Commercial processes, financial reporting, credit risk management, regulatory compliance, and operational resilience.
• Consult with Commercial, Technology, and Risk Management stakeholders regarding risk and control matters. This includes proposing solutions to audit findings, recommending control enhancements, and representing Internal Audit on cross‑functional working groups as appropriate.
• Manage multiple audit engagements and competing priorities concurrently in an efficient and effective manner with minimal oversight.
• Lead teams in incorporating data analytics and technology‑enabled audit techniques to enhance risk identification and audit execution throughout all phases of the audit lifecycle.
• Clearly demonstrate visible support for the department’s strategic objectives, including enhanced coverage of technology‑enabled Commercial risks and integrated assurance approaches.

Leadership, Decision Making, and Stakeholder Management

• Exercise strong independent judgment, initiative, and critical thinking in ambiguous or complex risk scenarios.
• Communicate audit status, emerging risks, and significant issues clearly and proactively to audit leadership and business executives, following a “no surprises” philosophy.
• Build trusted, productive relationships with Commercial Banking leaders, risk partners, and audit colleagues while maintaining independence and objectivity.
• Demonstrate political acuity, sound decision‑making, and sensitivity to organizational and cultural dynamics.
• Actively lead and support the advancement of Internal Audit’s strategic objectives and reputation as a trusted risk advisor.

Talent Development and Knowledge Sharing

• Coach, mentor, and oversee audit team members, tailoring development approaches based on experience and skill level, including building capability in assessing technology risks within Commercial audits.
• Actively contribute to department‑wide talent development, including cross‑training auditors on Commercial products, systems, and supporting technologies.
• Partner with the Commercial leadership team on staffing, performance evaluations, promotions, compensation recommendations, and performance management for direct reports.

Governance, Risk, & Compliance

• Adhere to all company policies, risk management frameworks, and regulatory standards applicable to audit and operational risk.
• Support a strong control environment, including timely remediation of internal and external audit issues and regulatory findings.
• Champion an inclusive, collaborative work environment that reflects the M&T Bank brand and values.
• Perform other related duties as assigned.

Scope of Responsibilities

• Responsible for the timely delivery of high‑quality, value‑added audit and assurance services across the Commercial line of business and its enabling technology environment, consistent with Audit Committee expectations and regulatory standards.
• Demonstrate deep working knowledge of commercial business regulatory guidance and examination expectations (e.g., safety and soundness standards, credit concentration risk management, CECL governance, and Shared National Credit concepts, as applicable) and support Internal Audit readiness for regulatory reviews and examinations.
• Ensures ongoing conformance with professional auditing standards and internal audit methodology.
• Regularly communicates with Senior, Middle, and Line Management, External Auditors, and periodic engagement with regulatory agencies.

Supervisory / Managerial Responsibilities

• This position has direct supervisory responsibility for selected audit team members and may provide coaching or oversight to audit professionals assigned to Commercial or technology‑enabled engagements.

Education and Experience Required

• Bachelor’s degree, preferably in Accounting, Business, Finance, Technology, Cybersecurity, Mathematics, Statistics, or a related field, and 7 years of relevant experience, including 2 years of supervisory or managerial experience.
• Strong leadership skills with demonstrated ability to develop and coach others.
• Excellent verbal and written communication skills.
• Strong project management, analytical, and interpersonal skills with the ability to exercise sound judgment and critical thinking.
• Effective negotiation skills and the ability to maintain independent viewpoints in senior‑level discussions.

Preferred Qualifications

• MBA or Master’s degree in an appropriate field.
• Minimum 3-5 years of IT Audit Experience
• Minimum 7-10 years of People Leadership Experience
• Professional certifications such as CPA, CIA, CISA, or similar.
• Financial Services industry experience preferred, particularly within Commercial banking, credit, or lending environments.
• Prior exposure to technology risk, IT controls, cybersecurity, or data governance supporting Commercial business processes preferred.

Why This Role

• This role offers the opportunity to influence risk outcomes across the Commercial Banking domain, partner with senior leaders, and play a critical role in protecting the organization while enabling responsible growth. It is ideal for an experienced professional seeking broader exposure, strategic impact, and visible leadership within a high‑performing Internal Audit function.