IAM Governance Lead: Cloud Identity & Access Strategy

M&T Bank; South Dakota; Hybrid; USD 116,000 - 194,000; Full time

Job summary

M&T Bank seeks an IAM Governance Leader to manage the Workforce Identity Access Management Governance team. You will drive policy, controls, and tooling to protect the bank from cyber threats, overseeing cross-functional governance across SailPoint, Azure AD/Entra ID, CyberArk, and PAM.

You will lead cloud identity strategy, entitlement management, and certification programs while partnering with risk and audit to meet regulatory expectations.

Qualifications

• Bachelor’s degree and minimum 5 years' relevant work experience.
• Advanced knowledge of IAM cybersecurity principles and compliance requirements.
• Minimum 2 years of managerial experience.
• Subject matter expert on IAM platforms: SailPoint, Azure AD, Entra ID, CyberArk, PAM.
• Experience with cloud identity strategy including RBAC and conditional access.

Responsibilities

• Provide governance leadership across common IAM platforms.
• Define expectations for birthright access, entitlements, and certification strategies.
• Lead governance strategy for cloud identity and privileged access governance.
• Establish guardrails for cloud-native access models and hybrid identity.
• Serve as a senior advisor on access decisions, risk exceptions and audits.
• Identify control gaps and recommend governance enhancements.
• Contribute to IAM roadmaps, tooling strategy, and modernization efforts.
• Prepare leadership reports and presentations from data analyses.

Skills

Governance leadership

IAM platforms

Azure AD (Entra ID)

SailPoint

CyberArk

PAM solutions

RBAC

Policy governance

Cloud identity

Governance across platforms

Education

Bachelor’s degree

5+ years relevant experience

Tools

SailPoint

Azure AD / Entra ID

CyberArk

PAM solutions

Job description

M&T Bank seeks an IAM Governance Leader to manage the Workforce Identity Access Management Governance team. You will drive policy, controls, and tooling to protect the bank from cyber threats, overseeing cross-functional governance across SailPoint, Azure AD/Entra ID, CyberArk, and PAM.

You will lead cloud identity strategy, entitlement management, and certification programs while partnering with risk and audit to meet regulatory expectations.