IAM Governance Specialist - Hybrid (4 Onsite, 1 Remote)

M&T Bank; Buffalo (NY); Hybrid; USD 81,000 - 135,000; Full time

Job summary

M&T Bank is seeking a Workforce Identity Access Management professional in Buffalo, NY, onsite with one remote day per week. You will analyze and support IAM processes, remediate access issues, and coordinate RFCs across tech teams to ensure compliant, secure identity governance.

The role emphasizes risk management, policy development, and collaboration with Cybersecurity and First Line Risk to meet regulatory expectations. Expect structured governance and ongoing audits.

Qualifications

• Bachelor’s degree and at least 2 years’ relevant work experience, or in lieu of a degree, a combined minimum of 6 years’ higher education and/or work experience including 1 year in Cybersecurity, Technology, or Risk/Audit
• Demonstrated working knowledge of IAM principles and compliance requirements

Responsibilities

• Act as a remediation specialist resolving access and identity-related issues identified through investigations, audits, and BAU reporting.
• Prepare and submit RFCs to implement remediation activities ensuring accuracy, completeness, and alignment with change management standards.
• Maintain knowledge of the change management process, including risk assessment, approvals, implementation, and validation requirements.
• Coordinate remediation execution across multiple technical teams to ensure timely, low‑risk implementation.
• Track remediation progress and provide status updates and evidence for audit, 2LoD, and regulatory validation.
• Build out job aids and process documentation for consistency across teams and shifts.
• Review and update policies and procedures pertaining to governance areas.
• Conduct and document research on industry best practices and regulatory requirements.
• Maintain systems for monitoring compliance with established policies and procedures.
• Analyze and report on compliance data to Cybersecurity leadership.
• Collaborate with Cybersecurity, Technology, and First Line Risk teams to mitigate risk.
• Gather data for internal audit and regulatory requests with accuracy.
• Assist remediation activities by drafting key actions, timeline, and communication plan.
• Communicate governance updates to stakeholders across Cybersecurity teams.
• Respond to ad-hoc cybersecurity analysis requests and issues.
• Maintain vendor relationships for security products and solutions.
• Strategize with leadership to manage vendor relationships and budget for tools/needs.
• Understand and adhere to risk and regulatory standards; design and enhance internal controls.
• Promote an environment that supports belonging and the M&T Bank brand.
• Maintain internal control standards and timely audit point implementation.
• Complete other related duties as assigned.

Skills

IAM principles

Regulatory compliance

Cybersecurity

Risk management

Stakeholder communication

Education

Bachelor’s degree +2 years experience

6 years higher ed/experience if no degree

Tools

SailPoint

Azure AD

Entra ID

CyberArk

PAM solutions

Job description

M&T Bank is seeking a Workforce Identity Access Management professional in Buffalo, NY, onsite with one remote day per week. You will analyze and support IAM processes, remediate access issues, and coordinate RFCs across tech teams to ensure compliant, secure identity governance.

The role emphasizes risk management, policy development, and collaboration with Cybersecurity and First Line Risk to meet regulatory expectations. Expect structured governance and ongoing audits.