Hybrid: Senior Tech & Cyber Risk Controls Lead

M&T Bank; Buffalo (NY); Hybrid; USD 124,000 - 206,000; Full time

Job summary

M&T Bank is seeking an experienced Controls Testing Lead in Buffalo, NY. The role focuses on executing and managing testing across Technology, Cybersecurity, and Data domains, partnering with risk advisors and owners to validate risk controls and remediation plans.

You will develop the annual testing plan, assess control design and operating effectiveness, and prepare management reports highlighting trends and remediation status.

Qualifications

• Bachelor's degree or equivalent with 7+ years of experience, or 11 years combined education/work
• Expert knowledge of Technology and/or Cybersecurity risk principles
• 6+ years in the specific risk area/business unit
• Experience with NIST SP800-53 and 800-53a
• Strong knowledge of cybersecurity principles and best practices

Responsibilities

• Maintain testing methodology, standards, and QA practices
• Lead development and management of Annual Controls Testing Plan
• Assess control design and operating effectiveness for risk mitigation
• Provide challenge to risk owners and control owners on risk mappings
• Lead complex controls testing engagements involving high-risk tech and regulatory commitments
• Evaluate remediation effectiveness and closure of audit findings and issues
• Contribute to training programs on risk management and controls testing
• Coordinate responses to regulatory engagements and exam management
• Deliver management reporting on testing results and risk trends
• Adhere to risk and regulatory standards and escalate issues as needed
• Promote diversity and uphold M&T Bank brand
• Maintain internal control standards and address regulator issues
• Complete other related duties as assigned

Skills

Technology risk principles

Cybersecurity risk principles

NIST/CSF frameworks

Information security

Regulatory risk management

Education

Bachelor's degree or equivalent

Master's degree preferred

NIST 800-53 experience

Cybersecurity certifications (CISA/CISSP/CISM/etc.)

Tools

Active Directory/LDAP

SAML

Encryption technologies

Job description

M&T Bank is seeking an experienced Controls Testing Lead in Buffalo, NY. The role focuses on executing and managing testing across Technology, Cybersecurity, and Data domains, partnering with risk advisors and owners to validate risk controls and remediation plans.

You will develop the annual testing plan, assess control design and operating effectiveness, and prepare management reports highlighting trends and remediation status.