First Line Risk Analyst - Technology

M&T Bank Corporation; Buffalo (NY); Hybrid; USD 86,000 - 143,000; Full time

Benefits offered by this job

Medical benefits

Retirement benefits

Paid volunteer time

Job summary

M&T Bank Corporation in Buffalo, NY seeks a Technology and Cybersecurity Risk Analyst to conduct comprehensive risk analyses, develop risk mitigation plans, and support policy improvement and compliance efforts.

The role collaborates with cross-functional teams, participates in regulatory preparations, trains junior analysts, and helps ensure risk controls align with the bank's risk appetite while maintaining strong internal controls and audit readiness.

Qualifications

• Bachelor's degree and a minimum of 3 years’ relevant work experience.
• Demonstrated proficient knowledge of Technology and/or Cybersecurity risk principles.
• Applicable certifications aligned to function or domain (CRISC, CISA, CISM, CISSP) preferred.

Responsibilities

• Conduct thorough risk analyses and identify potential control gaps with mitigation plans.
• Create and apply risk management plans with regular reporting and documentation.
• Assist compliance with internal standards, policies, and procedures.
• Collaborate with cross-functional teams and leadership for timely action when events exceed risk appetite.
• Prepare materials for regulatory engagements and aid exam management.
• Provide hands-on training to newer analysts for onboarding to risk teams.
• Ensure partners understand Technology and Cybersecurity risk management and roles.

Skills

Risk analysis

Mitigation planning

Regulatory compliance

Policy improvement

Training & onboarding

Cross-functional collaboration

Risk appetite understanding

Audit readiness

Education

Bachelor's degree

CRISC

CISA

CISM

CISSP

Job description

This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week. Overview: Conducts comprehensive risk analyses, develops and implements risk mitigation plans, and actively contributes to policy improvement and compliance efforts.

Primary Responsibilities

Conduct thorough risk analysis of capabilities; identify potential control gaps and recommend mitigation plan based on identified potential risk. Create and apply effective risk management plans that include regular reporting and documentation, such as identifying gaps in processes, writing standards, creating basic risk assessments, or reporting on findings. Assist compliance efforts for respective function, ensuring adherence to internal standards, policies, and procedures. Collaborate with cross-functional teams and leadership to ensure swift and effective action when events occur which are beyond the Bank's risk appetite. Assist with preparation and response to regulatory engagements, including material preparation, coordination of responses from various individuals, and aiding in exam management (i.e., template folders, collection of first day letter and follow-up requests) Propose and/or implement proactive measures and improvements, leveraging experience to safely innovate and optimize risk analysis processes. Provide hands-on training and guidance to newer analysts to effectively onboard to technology and cybersecurity risk team. Ensure partners across the Bank have appropriate level of understanding of Technology and Cybersecurity Risk management and roles within risk management. Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance with the Company’s Risk Appetite. Identify risk-related issues needing escalation to management. Promote an environment that supports belonging and reflects the M&T Bank brand. Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable. Complete other related duties as assigned.

Scope of Responsibilities

Interacts primarily with individual contributors and people leaders within the Technology and Cybersecurity teams. Will have occasional to frequent interaction with senior leaders of Technology and Cybersecurity. Work is accomplished with regular check-ins for alignment and limited direction. This role determines and develops approach to solutions, and work is evaluated upon completion to ensure objectives have been met. This role will prepare materials for Regulators under the direction of senior Technology and Cybersecurity Risk leaders.

Supervisory/Managerial Responsibilities

No supervisory responsibilities.

Education and Experience Required

Bachelor's degree and a minimum of 3 years’ relevant work experience, or in lieu of a degree, a combined minimum of 7 years’ higher education and/or work experience Demonstrated proficient knowledge of Technology and/or Cybersecurity risk principles Minimum of 2 years' relevant work experience in or with risk, audit, technology, cybersecurity, or related experience

Education and Experience Preferred

Applicable certification aligned to function or domain such as Certified in Risk and Information Systems Control (CRISC®), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) Proficient level of critical thinking and problem solving Excellent written and verbal communication skills Experience collaborating with peers and leadership to execute results Demonstrates curiosity and seeks critical information, and has ability to apply learnings Ability to adapt seamlessly to changing priorities and deliver results aligned with priorities Prior experience seeking buy-in of others to align on processes

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $85,800.00 - $143,000.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.

Location Buffalo, New York, United States of America

Great companies have an enduring sense of purpose. At M&T, our purpose is a simple one: make a difference in people’s lives and uplift the communities we serve. M&T Bank Corporation is a financial holding company headquartered in Buffalo, New York. M&T’s affiliates offer advice, guidance, expertise and solutions across the entire financial spectrum, combining M&T Bank’s traditional banking services with the wealth management and institutional capabilities offered by Wilmington Trust. M&T Bank has a network of over 1,000 branches and 2,200 ATMs that span 12 states from Maine to Virginia and Washington, D.C. For more than 165 years, M&T has strived to take an active role in our communities and build long-lasting relationships with our customers. We are a bank for communities—combining the capabilities of a large bank with the care of a locally focused institution. As an employer of choice, we are proud to offer competitive benefits ranging from medical and retirement to forty hours of paid volunteer time, each year. Our core values – integrity, ownership, collaboration, curiosity, and candor – drive the work we do. We seek to further build upon our record of success by bringing in top talent and fresh skill sets while continuing to support the growth and development of all our team members.

M&T Bank is unwavering when it comes to providing equal employment opportunities to all employees and applicants without regard to race, color, national origin, religion, ethnicity, sex, gender identity, age, disability, citizenship, pregnancy, veteran status, military status, marital status, sexual orientation, genetic information or any other characteristic protected under applicable federal, state or local laws.

M&T Bank Corporation has policies and procedures in place to promote a drug free workplace.