Privileged Access Manager

Overview:

Manages the activities and strategic priorities of one or multiple cybersecurity teams. Responsible for financial and human capital planning to ensure short- and long-term priorities support and protect the Bank from internal and external cybersecurity threats.

Primary Responsibilities:

• Lead strategic planning for cyber initiatives within function(s) of oversight, ensuring alignment of cybersecurity objectives with business goals.
• Prioritize work within function(s) of oversight and raise to senior leadership and finance to incorporate into financial plan.
• Develop risk mitigation strategies, controls, and frameworks in partnership with technology risk to manage identified risks effectively.
• Manage initiatives to identify and implement new/updated methodologies that ensure a proactive stance against risks.
• Partner with incident response teams to ensure that plans are regularly reviewed, updated, and tested to align with emerging threats and best practices.
• Oversee technology and systems and influence senior leadership to select appropriate system; lead designing of system and architecture once system is selected.
• Interpret regulatory and compliance requirements, and partner with risk, legal, and engineering teams to ensure necessary controls are implemented.
• May present in regulatory engagements to understand and address cybersecurity-related legal and regulatory requirements.
• Create strong workforce plan to meet business needs, including (but not limited to) mentoring and coaching high potential team members, developing career paths and succession planning for key roles, identifying training needs and gaps, and establishing culture of knowledge sharing and collaboration.
• Contribute to the delivery of the Bank-wide information security training and awareness program.
• Collaborate with technology and business leaders to create program that meets Cybersecurity objectives and organization needs.
• Exercise usual authority of a manager concerning staffing, performance appraisals, promotions, salary recommendations, performance management and terminations.
• Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues needing escalation to management.
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned.

Scope of Responsibilities:

• Primary partners: CISO, Cybersecurity Directors and Senior Managers
• Stakeholders: Technology team and the Bank
• Work is accomplished with minimal direction; strategizes team goals based on Cybersecurity imperatives.
• Oversees a minimum of 2 functions/teams within Cybersecurity.
• This role may present to Regulators.
• Accountable for informing and meeting budget for functions/teams they oversee.
• This role manages one or more functions/teams/departments within Cybersecurity:
  • Operations and Threat – proactively identify, analyze, and respond to cyber threats, ensuring the Bank's digital assets are secure and resilient against potential risks and attacks. Functions/teams may include security operations center, governance & oversight, insider threat, data loss prevention, threat intel & hunt, incident response, detection & protection engineering
  • Cloud and Architecture – design, implement, and manage secure and resilient cloud-based infrastructure, ensuring the protection of data and applications in the digital environment
  • Security Assessments and Business Information Security Officers (BISO) – evaluate and enhance overall security posture through thorough assessments, aligning cybersecurity measures with business operations to mitigate risks effectively. Functions/teams may include vulnerability management, BISO, penetration testing & attack, third party assessments, static application security testing/dynamic application security testing (SAST/DAST)
  • Identity and Access Management – regulate and secure user access to digital resources, ensuring proper authentication and authorization measures are in place to protect sensitive information and prevent unauthorized access. Functions/teams may include service & delivery, privileged access management, infrastructure & tooling, governance & oversight, monitoring & logging
  • Security Engineering – design, implementation, and management of robust security measures and systems to protect digital assets, data, and networks from cybersecurity threats and unauthorized access. It encompasses various disciplines such as network security, access controls, and threat protection and detection, with the overarching goal of ensuring the confidentiality, integrity, and availability of information in the face of evolving cybersecurity risks

Manager Responsibility:

Typically leads a team of 10-20 FTE (individual contributors, and managers)

Education and Experience Required:

• Bachelor's degree and a minimum of 7 years’ relevant work experience, or in lieu of a degree, a combined minimum of 11 years’ higher education and/or work experience
• Demonstrated expert knowledge of Cybersecurity principles.
• Minimum 6 years’ work experience in/with the specific cybersecurity function
• Minimum 2 years’ managerial experience

Education and Experience Preferred:

• Minimum of 6 years’ managerial experience
• Proven ability to mentor and lead cybersecurity individual contributors.
• Excellent communication
• Excellent interpersonal skills
• Ability to effectively articulate message to technical and business teams
• Experience effectively influencing peers and leaders.
• Experience prioritizing across competing priorities and quickly changing landscape.
• Experience in a highly regulated industry environment.
• Proficient understanding of financial services regulations, compliance requirements, and risk management practices.
• Ability to translate business objectives into strategic cyber plans, programs, and initiatives.

Location

About Us

Great companies have an enduring sense of purpose. At M&T, our purpose is a simple one: make a difference in people’s lives and uplift the communities we serve. M&T Bank Corporation is a financial holding company headquartered in Buffalo, New York. M&T’s affiliates offer advice, guidance, expertise and solutions across the entire financial spectrum, combining M&T Bank’s traditional banking services with the wealth management and institutional capabilities offered by Wilmington Trust. M&T Bank has a network of over 1,000 branches and 2,200 ATMs that span 12 states from Maine to Virginia and Washington, D.C. For more than 165 years, M&T has strived to take an active role in our communities and build long-lasting relationships with our customers. We are a bank for communities—combining the capabilities of a large bank with the care of a locally focused institution.

As an employer of choice, we are proud to offer competitive benefits ranging from medical and retirement to forty hours of paid volunteer time, each year. Our core values – integrity, ownership, collaboration, curiosity, and candor – drive the work we do. We seek to further build upon our record of success by bringing in top talent and fresh skill sets while continuing to support the growth and development of all our team members. View M&T’s Human Capital Report to learn more.

Ready to join our team? Submit your application today!

If you are unable to apply through this site due to technical issues or need an accommodation to apply, please contact us at careersitesupport@mtb.com for assistance.

M&T Bank is unwavering when it comes to providing equal employment opportunities to all employees and applicants without regard to race, color, national origin, religion, ethnicity, sex, gender identity, age, disability, citizenship, pregnancy, veteran status, military status, marital status, sexual orientation, genetic information or any other characteristic protected under applicable federal, state or local laws. M&T Bank Corporation has policies and procedures in place to promote a drug free workplace.