Lead Workforce IAM Governance Specialist

001 Manufacturers and Traders Trust Co; Buffalo (NY); Hybrid; USD 116.000 - 194.000; Vollzeit

Zusammenfassung

MT Bank Corporation seeks a senior IAM Governance leader to develop and govern enterprise IAM policies, standards and controls. You will partner with Cybersecurity, Technology, Risk, and business stakeholders to drive modernization, compliance, and risk mitigation.

Responsibilities include designing governance frameworks, dashboards, audit coordination, and strategic IAM roadmaps. You will mentor analysts and ensure adherence to regulatory requirements including SOX, FFIEC, and ISO 27001 within

Qualifikationen

• Bachelor's degree and a minimum of 5 years’ relevant work experience, or a combined 9 years of higher education/work experience including 4 years in Cybersecurity/Technology.
• Advanced knowledge of IAM principles and compliance requirements.
• Experience leading IAM transformation, modernization, and cloud identity initiatives.
• Strong knowledge of regulatory/compliance frameworks (SOX, FFIEC, NIST, ISO 27001).
• Ability to influence senior leaders and drive cross-functional initiatives without direct authority.

Aufgaben

• Lead development and maintenance of enterprise IAM governance frameworks, policies, standards and procedures.
• Define strategic IAM governance priorities and roadmaps with Cybersecurity, Technology, Risk, and business stakeholders.
• Evaluate emerging IAM technologies and regulatory requirements to inform recommendations.
• Design and oversee IAM governance reporting, dashboards, and monitoring for risk and compliance.
• Lead IAM-related audits and regulatory engagements and coordinate evidence and remediation.

Kenntnisse

IAM governance

Regulatory compliance

Policy development

Stakeholder management

Risk assessment

Ausbildung

Bachelor's degree

Tools

SailPoint

CyberArk

Microsoft Entra ID (Azure AD)

Saviynt

Okta

Jobbeschreibung

Location and Work Arrangement

This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week.

Overview

Responsible for leading the development, governance, and continuous improvement of Workforce Identity and Access Management (IAM) policies, standards, processes, and controls. Serves as a subject matter expert and strategic partner responsible for advancing IAM governance, regulatory compliance, and modernization initiatives that enhance the organization's security, resiliency, and operational effectiveness.

Primary Responsibilities

Lead development and maintenance of enterprise IAM governance frameworks, policies, standards, and procedures to ensure consistent monitoring, control effectiveness, and protection of workforce identities. Drive the development and evolution of IAM strategy, governance models, policies, and operating procedures in partnership with Cybersecurity leadership, Technology, Risk, and business stakeholders. Evaluate emerging IAM technologies, industry best practices, and regulatory requirements to define strategic recommendations and roadmap priorities for IAM governance and modernization initiatives. Design, implement, and oversee IAM governance reporting, metrics, dashboards, and monitoring capabilities to measure risk, compliance, control effectiveness, and operational performance. Prepare and present risk assessments, governance insights, executive reporting, and strategic recommendations to Cybersecurity leadership and governance committees. Serve as the primary IAM governance partner across Cybersecurity, Technology, Risk Management, Internal Audit, Compliance, and business leadership teams to proactively identify and mitigate risk. Lead IAM-related audit and regulatory engagements, including coordination of evidence collection, documentation reviews, management responses, issue remediation, and control enhancement activities. Partner with Cybersecurity teams and managers to continuously improve process documentation, governance reporting, performance metrics, and operational maturity. Create and oversee remediation plans, monitor execution against milestones, and provide guidance to stakeholders to ensure timely and effective resolution of identified risks and control gaps. Foster strong partnerships with stakeholders across the organization to ensure successful implementation and adoption of IAM governance processes and controls. Lead strategic IAM initiatives and modernization efforts, including identity lifecycle management, access certification, role-based access control (RBAC), privileged access governance, segregation of duties, and policy exception management. Provide thought leadership, mentorship, and guidance to analysts and project teams while promoting IAM best practices and governance standards across the organization. Understand and adhere to the Company's risk and regulatory standards, policies, and controls in accordance with the Company's Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues requiring escalation to management. Promote an environment that supports belonging and reflects the M&T Bank brand. Maintain M&T internal control standards, including timely implementation of internal and external audit findings, as well as any issues raised by external regulators as applicable. Complete other related duties as assigned.

Scope of Responsibilities

Partners with Cybersecurity leadership, Technology leadership, Risk Management, Compliance, Internal Audit, external auditors, and business stakeholders across the enterprise. Functions as a recognized IAM subject matter expert, exercising significant independent judgment in determining objectives, approaches, and solutions for complex identity governance, compliance, and risk management challenges. Work is accomplished with limited direction. Serves as a key advisor and escalation point for Workforce IAM governance matters, influencing strategic decisions and driving execution of enterprise IAM initiatives. Demonstrates advanced knowledge across identity governance, access management, privileged access management (PAM), cloud identity, regulatory compliance, and related cybersecurity disciplines.

Manager Responsibilities

No supervisory responsibilities.

Education and Experience Required

Bachelor's degree and a minimum of 5 years’ relevant work experience, or in lieu of a degree, a combined minimum of 9 years’ higher education and/or work experience inclusive of a minimum 4 years’ work experience in/with the specific Cybersecurity or Technology area and/or team Demonstrated advanced knowledge of IAM principles and compliance requirements.

Education and Experience Preferred

Advanced knowledge of SailPoint, CyberArk, Microsoft Entra ID (Azure AD), Saviynt, Okta, or comparable IAM and Privileged Access Management platforms. Experience leading IAM transformation, modernization, cloud identity, or enterprise governance initiatives. Expertise in identity lifecycle management, access provisioning, access certifications, role management, privileged access governance, and access control frameworks. Experience establishing enterprise IAM governance frameworks, policies, standards, and control procedures. Strong knowledge of regulatory and compliance frameworks, including SOX, FFIEC, NIST, ISO 27001, and related banking regulatory requirements. Proven experience developing IAM roadmaps, strategic planning efforts, and tooling transformation initiatives. Ability to influence senior leaders and drive cross-functional initiatives without direct authority. Demonstrated advanced knowledge of technology risk management principles and compliance requirements. Excellent written, verbal, presentation, and stakeholder management skills. Strong critical thinking, analytical, and problem-solving skills with the ability to lead resolution of complex governance and risk-related challenges. Proven experience translating technical and regulatory requirements into scalable governance processes, policies, and standards.

Compensation

The pay range for this position is $116,400.00 - $194,000.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.

Location

Buffalo, New York, United States of America

Company Description and Culture

Great companies have an enduring sense of purpose. At M&T, our purpose is a simple one: make a difference in people’s lives and uplift the communities we serve. M&T Bank Corporation is a financial holding company headquartered in Buffalo, New York. M&T’s affiliates offer advice, guidance, expertise and solutions across the entire financial spectrum, combining M&T Bank’s traditional banking services with the wealth management and institutional capabilities offered by Wilmington Trust. M&T Bank has a network of over 1,000 branches and 2,200 ATMs that span 12 states from Maine to Virginia and Washington, D.C. For more than 165 years, M&T has strived to take an active role in our communities and build long-lasting relationships with our customers. We are a bank for communities—combining the capabilities of a large bank with the care of a locally focused institution. As an employer of choice, we are proud to offer competitive benefits ranging from medical and retirement to forty hours of paid volunteer time, each year. Our core values – integrity, ownership, collaboration, curiosity, and candor – drive the work we do. We seek to further build upon our record of success by bringing in top talent and fresh skill sets while continuing to support the growth and development of all our team members. View M&T’s Human Capital Report to learn more.

Equal Opportunity Statement

M&T Bank is unwavering when it comes to providing equal employment opportunities to all employees and applicants without regard to race, color, national origin, religion, ethnicity, sex, gender identity, age, disability, citizenship, pregnancy, veteran status, military status, marital status, sexual orientation, genetic information or any other characteristic protected under applicable federal, state or local laws.

Drug-Free Workplace

M&T Bank Corporation has policies and procedures in place to promote a drug free workplace.