Senior IT Audit & Cyber Risk Lead (Hybrid)

Amalgamated Bank; New York (NY); On-site; USD 160,000 - 180,000; Full time

Job summary

Amalgamated Bank in New York, NY seeks a Senior Audit Manager to lead IT and information security audits across banking operations. You will supervise complex risk-based audits, assess governance, risk management, and control effectiveness, and report to senior management and the Audit Committee.

The role requires 8–10 years in IT audit or risk within regulated financial services, strong ITGC, cybersecurity knowledge, data analytics experience, and the ability to translate technical issues into

Qualifications

• Bachelor’s degree in Accounting, Finance, Information Systems, Computer Science, or a related field.
• 8–10 years of progressive internal IT audit, IT audit, information security, or risk management experience in a regulated financial services environment.
• CISA strongly preferred; CIA or CPA a plus.
• Certification or training in AI ethics, data governance, or model risk management (e.g., MIT AI Ethics, NIST AI Risk Framework).
• Demonstrated experience leading complex IT and information security audits and supervising audit staff.
• Significant experience auditing or managing risks in data analytics, machine learning, or AI environments.
• Strong understanding of IT general controls, cybersecurity, cloud environments, data governance, third-party risk, and SDLC controls.
• Understanding of COSO internal control framework and its application to technology-enabled processes.
• Excellent analytical, organizational, and project management skills.
• Strong written and verbal communication skills, with the ability to translate complex technical issues for senior management and the Audit Committee.

Responsibilities

• Lead and supervise internal audits focused on Information Technology, Information Security, cybersecurity, technology governance, third-party risk management, data protection, and SDLC controls.
• Serve as the Internal Audit SME for IT and Information Security, including identifying emerging technology and cyber risks relevant to the Bank.
• Plan and execute audits across multiple business lines, including IT, Commercial Banking, Risk Management, and Bank Operations.
• Integrate data analytics and AI audit methodologies into the overall audit framework.
• Develop audit scopes, perform risk assessments, oversee testing, validate issues, and ensure coverage of IT-dependent controls.
• Identify control deficiencies, assess root causes and impact, and recommend remediation strategies.
• Review and approve audit workpapers to ensure accuracy, completeness, and adherence to Internal Audit standards.
• Prepare, review, and edit audit reports to communicate technology and business risks to senior management and the Audit Committee.
• Evaluate management action plans and monitor remediation of IT and information security issues.
• Coordinate audit activities with regulators and external or co-source auditors for targeted technology reviews.
• Support enterprise risk assessment, SOX, and regulatory examination activities where technology risks exist.
• Provide coaching and guidance to audit staff and stay current on FFIEC, NIST, and cybersecurity frameworks.

Skills

IT audit

Information Security

Risk management

Auditing leadership

Data analytics

AI audit

Stakeholder communication

Education

Bachelor's degree

Tools

Tableau

Python

SQL

Power BI

R

Job description

Amalgamated Bank in New York, NY seeks a Senior Audit Manager to lead IT and information security audits across banking operations. You will supervise complex risk-based audits, assess governance, risk management, and control effectiveness, and report to senior management and the Audit Committee.

The role requires 8–10 years in IT audit or risk within regulated financial services, strong ITGC, cybersecurity knowledge, data analytics experience, and the ability to translate technical issues into