Senior Audit Manager

Amalgamated Bank of NY; New York (NY); Hybrid; USD 160,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Amalgamated Bank of NY in New York, NY seeks a Senior Audit Manager to lead IT and information security audits, oversee risk governance, and align audit activities with regulatory expectations. You will coordinate with stakeholders, develop audit scopes, and mentor audit staff while integrating data analytics and AI audit techniques.

The role emphasizes collaboration across lines of business, regulatory readiness, and strong communication with senior management and the Audit Committee.

Qualifications

• Bachelor’s degree in a related field and 8–10 years in internal IT/audit or risk.
• Strong knowledge of IT controls, cybersecurity, data governance, and SDLC.
• Experience leading IT and information security audits in financial services.
• Professional certifications such as CISA preferred; CIA or CPA a plus.
• Ability to translate technical risk into senior management reporting.

Responsibilities

• Lead and supervise internal audits with emphasis on IT, information security, cybersecurity, and risk governance.
• Plan audits across IT, Commercial Banking, Risk Management and Operations.
• Integrate data analytics and AI audit methodologies into audits.
• Develop scopes, perform risk assessments, oversee testing and issue validation.
• Review workpapers, write reports, and communicate risks to senior management and Audit Committee.

Skills

IT auditing

Information Security

Regulatory compliance

Data analytics

Team leadership

Education

Bachelor’s degree in Accounting

Bachelor’s degree in Finance

CISA certification

CIA or CPA

AI ethics / data governance training

Tools

Tableau

Python

SQL

Power BI

R

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Senior Audit Manager

New York, NY, US

Salary Range: $160,000.00 To $180,000.00 Annually

Purpose of Position:

The Senior Audit Manager supports the Deputy Chief Audit Officer (DCAO) in planning, supervising, and executing the Internal Audit plan, with a primary focus on Information Technology and Information Security risks. The role serves as a subject matter expert in technology and cyber risk while also providing audit coverage across other critical areas of Amalgamated Bank, including Commercial Banking, Risk Management, and Operations. This position is responsible for leading complex, risk-based audits; assessing governance, risk management, and control effectiveness; and ensuring audit activities align with professional standards, regulatory expectations, and industry best practices.

Essential Job Functions:

• Lead and supervise internal audits and targeted reviews with a primary emphasis on Information Technology, Information Security, cybersecurity, technology governance, third-party risk management, data protection, and system development life cycle controls.
• Serve as the Internal Audit subject matter expert for IT and Information Security, includingidentifyingemerging technology and cyber risks relevant to the Bank.
• Plan and execute audits across multiple business lines, including IT, Commercial Banking, Risk Management, and Bank Operations, ensuringappropriate integrationof technology risks into all audits.
• Integrate data analytics and AI audit methodologies into the overall audit framework.
• Develop audit scopes, perform risk assessments, oversee testing,validateissues, and ensureappropriate coverageof IT-dependent controls.
• Identifycontrol deficiencies, assess rootcausesandimpact, and recommend practical, risk-based remediation strategies.
• Review and approve audit workpapers to ensure accuracy, completeness, and adherence to Internal Audit standards.
• Prepare, review, and edit audit reports to clearly communicate technology, information security, and business risks from a senior management and Audit Committee perspective.
• Evaluate management action plans andmonitorthe remediation of IT, information security, and business audit issues.
• Coordinate audit activities with internal stakeholders, regulators, and external or co-source auditors, particularly for targeted technology and cybersecurity reviews.
• Support enterprise risk assessment, SOX, and regulatory examination activities where technology or data risks are present.
• Provide coaching, technical guidance, and performance feedback to audit staff and managers.
• Stay current on regulatory guidance, industry standards, and emerging risks related to IT and information security, including FFIEC, NIST, and cybersecurity frameworks.
• Assist the DCAO with departmental initiatives, strategic projects, and regulatory or Board-level requests as assigned.

Knowledge, Skills and Experience Requirements :

• Bachelor’s degree in Accounting , Finance, Information Systems, Computer Science, or a related field.
• Minimum of 8–10 years of progressive internal audit, IT audit, information security, or risk management experience within a regulated financial services environment.
• Professional certification such as CISA strongly preferred; CIA or CPA a plus.
• Certification or training in AI ethics, data governance, or model risk management (e.g., MIT AI Ethics, NIST AI Risk Framework).
• Demonstrated experience leading complex IT and information security audits and supervising audit staff.
• Significant experienceauditing or managing risks in data analytics, machine learning, or AI environments.
• Strong understanding of IT general controls, cybersecurity, cloud environments, data governance, third-party risk, and SDLC controls.
• Deep knowledge of AI/ML systems, model lifecycle, and related controls.
• Understanding of data analytics tools (e.g., Tableau, Python, SQL, Power BI, R) and audit automation.
• Working knowledge of banking regulations and technology-related regulatory expectations (e.g., FFIEC, OCC, FDIC guidance).
• Understanding of COSO internal control framework and its application to technology-enabled processes.
• Excellent analytical, organizational, and project management skills.
• Strong written and verbal communication skills, with the ability to translate complex technical issues for senior management and the Audit Committee.

Our job titles may span more than one career level. The starting base salary for this role is between $160,000 – $180,000. The actual base pay is dependent upon many factors, such as: training, transferrable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future.

Hybrid Work Model
Effective February 18, 2025, employees in office-based positions will be working a Hybrid work schedule consisting of three days or more, on-site per week, Monday - Thursday, although the specific days may vary by site or organization, with Friday designated as a remote-working day, unless business critical tasks require an on-site presence. This Hybrid work model does not apply to, and daily in-person attendance is required for, the contact center, branch service roles, and general services where the work to be performed is located at a Company site; positions covered by a collective-bargaining agreement (unless the agreement provides for hybrid work); or any other position for which the Company has determined the job requirements cannot be reasonably met working remotely. Please note, this Hybrid work model guidance does not apply to roles that have been designated as “remote”.