Executive Security Strategist for Business & Tech (Hybrid)

M&T Bank Corporation; Buffalo (NY); Hybrid; USD 148,300 - 247,100; Full time

Job summary

M&T Bank Corporation is seeking a Senior Business Information Security Officer to serve as a trusted security advisor to executive leaders across technology and business units. You will align cybersecurity strategies with business objectives and guide risk management and governance programs.

You will build strategic partnerships, translate complex security concepts for non-technical stakeholders, and drive security-by-design initiatives to protect critical operations across the enterprise.

Qualifications

• Bachelor's degree required; Master’s degree preferred.
• Minimum of 9 years’ relevant work experience; 13 years with higher education
• Minimum of 5 years’ experience working with business leadership and enterprise projects
• Strong communication, interpersonal and executive advisory skills
• Experience aligning cybersecurity with business objectives and risk management frameworks

Responsibilities

• Serve as senior cybersecurity advisor to SEVPs and EVPs across tech and business units.
• Foster strategic relationships to deliver security-by-design controls.
• Identify threats and document vulnerabilities; integrate findings into risk plans.
• Advise leadership on prioritization of cybersecurity investments within business enablement constraints.
• Ensure adherence to risk and regulatory standards and internal controls.

Skills

Executive communication

Cybersecurity risk management

Strategic influence

Business stakeholder collaboration

Security governance

Education

Bachelor's degree

Master's degree

Job description

M&T Bank Corporation is seeking a Senior Business Information Security Officer to serve as a trusted security advisor to executive leaders across technology and business units. You will align cybersecurity strategies with business objectives and guide risk management and governance programs.

You will build strategic partnerships, translate complex security concepts for non-technical stakeholders, and drive security-by-design initiatives to protect critical operations across the enterprise.