he Bank sponsors individuals for TN and H-1B transfers on a case by case basis. Please note that this position is not open to anyone on an F-1 student visa including those eligible for CPT/OPT or the Stem OPT extension.

This role offers a hybrid work schedule; offering the flexibility to work remotely two days a week, while providing the opportunity for in-person collaboration at our Buffalo, NY Tech Hub.

Overview:

As a Workforce Identity Access Management (WIAM) Privileged Access Management (PAM) Governance Risk Analyst, you will play a crucial role in overseeing the governance and compliance aspects of M&T’s IAM and PAM frameworks. You will work closely with cross-functional teams to ensure the effective management of user access rights, privileged access models, enforce security policies, and maintain regulatory compliance. This role functions with a moderate level of autonomy, leveraging team peer connections and support from more senior members of the WIAM team.

Primary Responsibilities:Oversight of WIAM governance framework that aligns with industry best practices, regulatory requirements, and organizational policies.Responsible for overseeing the governance framework that manages privileged access management (PAM) across all systems.Ensure PAM policies and controls are in alignment with industry standards, regulatory requirements, and organizational goals. Engage in collaboration with all WIAM teams and stakeholders to ensure the implementation and maintenance of governance practices. Adhere to applicable operational risk controls in accordance with Company or regulatory standards and policies and standards.Develop, implement, and enforce access management policies, procedures, and guidelines, ensuring compliance with relevant regulatory bodies.Collaborate with internal and external auditors to ensure compliance with IAM-related regulatory requirements, manage audits, and respond to audit inquiries.Establish processes for user provisioning, de-provisioning, and modification of access rights across applications, ensuring timely and accurate access management.Develop, monitor, report, and address anomalies of key performance indicators (KPIs) and key risk indicators (KRIs).

​

Scope of Responsibilities:Partners with peers, manager, Cybersecurity team and leadership, First Line Risk team, Internal Audit team, and external auditorsExercises judgement in selecting methods, techniques, and evaluation criteria in obtaining results. Exerts significant latitude in determining objective of assignment.  Work is accomplished with limited direction.Subject matter expert on multiple cybersecurity platforms and applications within function and working knowledge on multiple platforms and applications across full cybersecurity team.

Education and Experience Required:Bachelor's degree and a minimum of 5 years’ relevant work experience, or in lieu of a degree, a combined minimum of 9 years’ higher education and/or work experience inclusive of a minimum 4 years’ work experience in/with the specific Cybersecurity or Technology area and/or teamDemonstrated advanced knowledge of cybersecurity principles and compliance requirements.

Education and Experience Preferred:Background in Identity and Access ManagementBackground in control and risk governanceExcellent documentation skillsStrong interpersonal and communication skills, with the ability to collaborate effectively with stakeholders at all levels of the organization.Detail-oriented with a commitment to accuracy and quality in work deliverables.Ability to work independently, manage multiple priorities, and meet deadlines in a dynamic, fast-paced environment.Strong problem-solving and critical-thinking abilities.

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $110,635.01 - $184,391.68 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.

LocationBuffalo, New York, United States of America