Senior Business Information Security Officer

M&T Bank Corporation; Buffalo (NY); Hybrid; USD 148,300 - 247,100; Full time

Job summary

M&T Bank Corporation is seeking a Senior Business Information Security Officer to serve as a trusted security advisor to executive leaders across technology and business units. You will align cybersecurity strategies with business objectives and guide risk management and governance programs.

You will build strategic partnerships, translate complex security concepts for non-technical stakeholders, and drive security-by-design initiatives to protect critical operations across the enterprise.

Qualifications

• Bachelor's degree required; Master’s degree preferred.
• Minimum of 9 years’ relevant work experience; 13 years with higher education
• Minimum of 5 years’ experience working with business leadership and enterprise projects
• Strong communication, interpersonal and executive advisory skills
• Experience aligning cybersecurity with business objectives and risk management frameworks

Responsibilities

• Serve as senior cybersecurity advisor to SEVPs and EVPs across tech and business units.
• Foster strategic relationships to deliver security-by-design controls.
• Identify threats and document vulnerabilities; integrate findings into risk plans.
• Advise leadership on prioritization of cybersecurity investments within business enablement constraints.
• Ensure adherence to risk and regulatory standards and internal controls.

Skills

Executive communication

Cybersecurity risk management

Strategic influence

Business stakeholder collaboration

Security governance

Education

Bachelor's degree

Master's degree

Job description

## Senior Business Information Security OfficerApplyremote type: Hybrid Positionlocations: Buffalo, NYtime type: Full timeposted on: Posted Todayjob requisition id: R88557# **Overview:**Responsible for serving as a trusted, strategic security advisor to senior and executive leaders in technology and business units. Builds strategic relationships with business unit leaders to align cybersecurity strategies with business objectives, ensuring that security measures support and enhance business operations. Manages risk by identifying vulnerabilities, influencing implementation of appropriate controls, and guiding compliance with relevant regulations.## **Primary Responsibilities:*** Serve as the senior cybersecurity advisor to business units, providing direct counsel to Senior Executive Vice Presidents (SEVPs) and Executive Vice Presidents (EVPs) within business units inclusive of technology, client facing, and enterprise functions.* Foster and maintain strategic relationships with business units to deliver security-by-design controls, ensuring cybersecurity practices are built into business unit initiatives for the entire lifecycle.* Champion a culture of cybersecurity continuous improvement by maintaining current knowledge related to security threats, vulnerabilities and mitigations set forth to reduce the attack surface; circulate this knowledge appropriately across business units, including key actions to implement.* Identify and document threats and vulnerabilities that may impact the business and address them regularly with business units by integrating findings into long-term strategic plans and risk management frameworks.* Engage with executive business unit leaders and cross-functional teams to address systematic issues that cause obstacles or increased complexity, hindering efficient security controls within business units.* Strategize with cybersecurity, technology, and business leaders to define key performance indicators and metrics aligning with business initiatives and deliver them to non-technical teams in terms that are accessible and comprehensible.* Provide guidance and advocacy to business unit SEVPs and EVPs regarding the prioritization of business unit investments that impact cybersecurity while balancing business enablement capabilities.* Advise business unit leadership on cybersecurity-related risk issues and influence actions to take in close partnership with Technology Risk Management and in support of the organizations wider risk management and compliance programs.* Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues needing escalation to management.* Promote an environment that supports belonging and reflects the M&T Bank brand.* Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.* Complete other related duties as assigned.## **Scope of Responsibilities:*** Primary stakeholders: Technology and Business Line EVPs & SEVPs* Primary partners: Cybersecurity people leaders, Technology EVPs and SVPs* Work is accomplished with high degree of autonomy; strategizes business-unit specific imperatives in alignment with Bank imperatives.* Subject matter expert of multiple Cybersecurity functions## **Supervisory/Manager Responsibilities:**No supervisory responsibilities.## **Education and Experience Required:*** Bachelor's degree and a minimum of 9 years’ relevant work experience, or in lieu of a degree, a combined minimum of 13 years’ higher education and/or work experience, including a minimum of 7 years’ relevant work experience in an operationally focused security practitioner role.* Minimum of 5 years’ experience working with business leadership and enterprise projects.## **Education and Experience Preferred:*** Minimum of 15 years of experience in cybersecurity, technology risk, and/ or business unit.* Master’s degree in information assurance, computer science, business administration, or related field.* Excellent communication and interpersonal skills; ability to effectively convey messages to technical and executive business leaders.* Excellent ability to translate complex cybersecurity issues to business leader initiatives and strategies.* Experience building strategic plans in partnership with senior leadership, third parties, project managers, technical and cybersecurity subject matter experts, and business subject matter experts.* Strong understanding of cybersecurity technologies, their purpose, and their security requirements and data protection needs.* Excellent understanding of threats, risk mitigations, and technical controls recommended by security leaders.* Experience partnering with senior leaders to design solutions to meet business needs while delivering a strong cybersecurity posture.* Excellent ability to influence bank-wide efforts through effective clear communication, leveraging program management principles, and escalating when necessary.* Excellent ability to prioritize and deliver results across changing priorities and quickly changing landscape based on business and technology needs.* Excellent ability to work effectively with unique teams and varying personalities and adapt leadership and influence styles to effectively reach mutually beneficial outcomes.* Excellent knowledge of national and global cybersecurity policies, regulations, and security frameworksM&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $148,300.00 - $247,100.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.# **Location**Buffalo, New York, United States of America### About UsGreat companies have an enduring sense of purpose. At M&T, our purpose is a simple one: **make a difference in people’s lives and uplift the communities we serve**. M&T Bank Corporation is a financial holding company headquartered in Buffalo, New York. M&T’s affiliates offer advice, guidance, expertise and solutions across the entire financial spectrum, combining M&T Bank’s traditional banking services with the wealth management and institutional capabilities offered by Wilmington Trust. M&T Bank has a network of over 1,000 branches and 2,200 ATMs that span 12 states from Maine to Virginia and Washington, D.C. For more than 165 years, M&T has strived to take an active role in our communities and build long-lasting relationships with our customers. We are a bank for communities—combining the capabilities of a large bank with the care of a locally focused institution.**As an employer of choice, we are proud to offer** **competitive benefits** ranging from medical and retirement to forty hours of paid volunteer time, each year. Our core values – integrity, ownership, collaboration, curiosity, and candor – drive the work we do. We seek to further build upon our record of success by bringing in top talent and fresh skill sets while continuing to support the growth and development of all our team members. ViewM&T’s Human Capital Report to learn more.**Ready to join our team?** Submit your application today!If you are unable to apply through this site due to technical issues or need an accommodation to apply, please contact us at [e-mail] for assistance.