Hybrid Director, Audit Manager – Application Technology Audit

at BNY

• Job title: Director, Audit Manager – Application Technology Audit
• Job type: Full Time
• Experience level: Lead
• Salary: $127,000 - $242,250 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Cloud, Cyber Security, SDLC, Swift
• Location requirements: Hybrid, New York City, United States

About the role

• Director, Audit Manager for Application Technology Audit at BNY. Leading audit plans and managing a global team in a top financial services company.

Responsibilities

• Develop and execute risk-based audit plans for critical applications and platforms, aligned with Enterprise and IT risk frameworks
• Assess the design, implementation, and operating effectiveness of controls over:
• SDLC phases (requirements, design, development, testing, deployment)
• Change management and release processes
• Application security (authentication, authorization, encryption)
• Data integrity, input/output controls, and backup/recovery procedures
• User access provisioning, segregation of duties, and privileged access monitoring
• Perform walkthroughs, test design and operating effectiveness, document findings, and prepare clear, actionable audit reports
• Collaborate with application owners, developers, security, and operations teams to validate remediation plans and track issue resolution
• Leverage data analytics and automated testing tools to enhance audit coverage and efficiency
• Monitor emerging technologies, industry frameworks (e.g., COBIT, NIST, COSO), and regulatory requirements to update audit methodologies
• Lead the end-end audit lifecycle, including planning, fieldwork, reporting, and issue validation.
• Evaluate the design and effectiveness of technology controls supporting key business processes such as payments, clearing, settlement, fraud detection, sanctions screening, and related infrastructure.
• Oversee risk assessments for technology systems and ensure emerging risks (e.g., AI/ML in payment monitoring, instant payments, ISO 20022 adoption, cloud migration, cybersecurity threats) are appropriately covered.
• Partner with business, technology, and risk stakeholders to assess the impact of regulatory requirements (e.g, PDS2, FedNow, SWIFT, Sanctions Compliance)
• Manage and mentor audit managers and staff, fostering a high performance team culture with focus on technical depth, risk insights, and stakeholder impact.
• Ability to manage global projects on time and within budget.
• Experience with managing and motivating a global team.

Requirements

• Bachelor’s degree in computer science, Information Technology, or a related field (Master’s degree preferred)
• Minimum of 12-15 years of experience in IT auditing or Cybersecurity
• Proven experience in conducting IT Audits
• Strong understanding of IT general controls, cybersecurity, cloud, data governance and resiliency principles
• Strong technical knowledge of IT systems, networks, and Information Systems management
• Professional certifications such as CISA, CISSP, or CISM are highly desirable
• Excellent analytical and critical thinking skills
• Effective communication and interpersonal skills
• Ability to lead a team and manage senior stakeholders across the firm

Benefits

• Highly competitive compensation
• Health insurance
• Wellbeing programs
• Paid leaves including paid volunteer time