IT Internal Audit Officer

Come work with us:

Metropolitan Commercial Bank ("MCB" or the "Bank") is a New York City-based, full-service commercial bank providing tailored banking solutions to businesses, institutions, and individuals. Founded in 1999, MCB operates banking centers in Manhattan and Boro Park, Brooklyn, within New York City, as well as in Great Neck on Long Island, New York, and Lakewood, New Jersey. The Bank recently expanded to Miami, Florida with their newest Brickell banking center.

Metropolitan Commercial Bank offers a comprehensive suite of commercial, business, and personal banking products and services to small businesses, middle-market and corporate enterprises, private and public institutions, municipalities, and local government entities.

The Bank has earned national recognition for its financial performance, innovation, and strategic growth. The Bank was named one of Newsweek's Best Regional Banks in 2024 and 2025. Additionally, MCB recently received Editor's Choice recognition at the Banking Tech Awards USA for Digital Onboarding & Omnichannel Banking and in 2026, the Bank earned Great Place To Work certification and received the Web Award Standard of Excellence for MCBankNY.com.

We are a client-focused organization that values technological innovation and excellence. A strong technical mindset, AI fluency, and adaptive skills are essential for our employees to effectively contribute to our mission and drive our success. We foster human-AI teaming and strong governance to ensure technology is used responsibly and in alignment with Bank policies and procedures. For more information about the Bank, please visit the Bank's website at MCBankNY.com.

Position Summary:

We are seeking a highly motivated Internal Audit Officer to join our Internal Audit Department at the Metropolitan Commercial Bank (the "Bank"). This role is essential in supporting the co-sourced IT audit function by action as the primary liaison between internal stakeholders and the audit co-sourcing firm. You will ensure that the co-sourced IT audits are conducted effectively, aligned with regulatory standards, and contribute to the overall risk management framework of the Bank. This position reports to a VP, Audit Senior Manager. The position will require ongoing interaction with the co-sourcing firm, regulators, and external auditor(s). This position is ideal for a candidate who will thrive in a dynamic and collaborative environment that values innovation, integrity and inclusion.

Standard 4-day in-office requirement, 1 day remote (of your choosing)

Essential duties and responsibilities:

• Serve as the main point of contact between the Internal Audit Department and the co-sourcing audit firm; manage IT audits.
• Assist in the development of Internal Audit's annual risk assessment and the audit plan; ensuring the plan is responsive to, and aligned with, the risk profile of the Bank; ensuring the risk assessment is periodically updated as needed.
• Evaluate the design and operating effectiveness of IT related controls, adherence to established policies and procedures, and regulatory guidance.
• Review and validate co-sourcing firm workpapers; discuss irregularities, exceptions and deficiencies discovered during audits and issue validation testing with management.
• Manage the issue tracking including regulatory issues. Review and evaluate evidence obtained from management for validation and perform follow-up testing as necessary.
• Assist in assessing IT processes, controls and documentation associated with SOX 404 program, collaborate with the Bank's external auditor, and test SOX controls on behalf of management.
• Provide knowledgeable and objective counsel to strengthen the Bank's IT control environment; conduct pre/post- implementation of IT systems, present audit results to management and the Audit Committee as needed.
• Assist in developing IT audit methodology and IT audit procedures.
• Engage in continuous learning by participating in educational opportunities; maintaining professional accreditations; read professional publications; participate in professional organizations. Stay current on emerging technologies and regulatory requirements impacting IT risk and audits.

Required knowledge, skills and experience:

• 6+ years of progressive external and/or internal IT audit experience in an organization of appropriate scale and complexity; bank and publicly traded company experience.
• Bachelor's degree in information technology, Computer Science, or a related field.
• Relevant certification preferred (e.g., CISA, CISSP, CIA, CPA)
• Strong understanding of IT general controls, cybersecurity frameworks and related regulatory guidelines (e.g., FFIEC, GLBA, SOX)
• Prior experience working with regulatory agencies, including FRB, NYSDFS and FDIC is plus.
• Ability to build relationships with both technical and business stakeholders.
• Strong time management and organizational skills, written and oral communication skills.
• Exceptional leadership and problem-solving skills.
• Ability to exercise good judgment, to make sound decisions, and to identify opportunities to improve audit efficiency and effectiveness.
• Ability to coach and train staff employees.
• Driven by a passion and curiosity to continuously learn how various technological systems, including AI, can enhance the work that you do

Preferredknowledge, skills and experience:

• A results-driven, self-starter possessing excellent communication, collaboration and influencing skills.
• Collaborative team-player who can find creative and practical solutions in a dynamic work environment.
• Ability to work under pressure, and to handle ambiguity, juggle multiple matters at once, and quickly and seamlessly shift from one situation or task to another.

Potential Salary: $140,000- $150,000 annually

This salary range only reflects base wages and does not include benefits, bonus, or incentive pay. Salary bands are purposefully wide ranging to encompass the different factors considered in determining where a candidate falls in the range, including but not limited to, seniority, performance, experience, education, and any other legitimate, non-discriminatory factor permitted by law.

Metropolitan Commercial Bank provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

This applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.