Hybrid Cyber Risk Lead for AI & Security

M&T Bank; Buffalo (NY); Hybrid; USD 148,000 - 247,000; Full time

Job summary

M&T Bank is seeking a risk leadership professional to oversee risk analysis and governance for Cybersecurity and AI initiatives. You will influence risk frameworks, controls, and standards across engineering and architecture, partnering with CISO and senior leaders to address evolving technology risks.

You will lead assessments of emerging threats, regulatory guidance, and industry developments while ensuring alignment with regulatory expectations and organizational objectives.

Qualifications

• Bachelor's degree and 9+ years risk experience or 13 years combined education/work.
• Expert knowledge of technology and cybersecurity risk principles.
• Minimum 8 years' experience in risk within the specific risk area/business unit.
• Experience supporting audits, regulatory examinations, and control reviews.
• Experience partnering with the CISO and senior leaders to influence risk decisions.

Responsibilities

• Develop and implement risk frameworks, controls, and standards for Cybersecurity and AI engineering.
• Act as a first line risk advisor to engineering, architecture, and security teams.
• Lead assessments of technology trends, regulatory guidance, and industry developments.
• Design and implement risk management processes that support evolving initiatives.
• Collaborate with senior leadership to evaluate strategic initiatives and provide risk-informed recommendations.
• Drive development of new controls to address emerging risks.

Skills

Risk management

Governance

Cybersecurity risk

Regulatory compliance

Communication to leadership

Audit coordination

AI risk awareness

Education

Bachelor's degree or equivalent

Master's degree preferred

CRISC

CISA

CISM

CISSP

Job description

M&T Bank is seeking a risk leadership professional to oversee risk analysis and governance for Cybersecurity and AI initiatives. You will influence risk frameworks, controls, and standards across engineering and architecture, partnering with CISO and senior leaders to address evolving technology risks.

You will lead assessments of emerging threats, regulatory guidance, and industry developments while ensuring alignment with regulatory expectations and organizational objectives.