Senior First Line Risk Specialist – Technology

M&T Bank Corporation; Bridgeport (CT); Hybrid; USD 151,000 - 251,000; Full time

Job summary

M&T Bank Corporation is seeking a senior risk leader in Bridgeport, CT to oversee technology risk assessments, control evaluations, and audit readiness. You will partner with Technology, Cybersecurity, Risk Management, Internal Audit, and regulators to strengthen governance and ensure effective controls across critical initiatives.

The role emphasizes complex risk analysis, cross-functional collaboration, and mentorship.

Qualifications

• Bachelor's degree and a minimum of 7 years’ relevant work experience, or in lieu of a degree, a combined minimum of 11 years’ higher education and/or work experience.
• Demonstrated expert knowledge of Technology, Cybersecurity, Audit and/or risk principles.
• Minimum of 6 years' relevant work experience in or with the specific Technology, Audit, Cybersecurity risk area and/or business unit.
• Professional certifications such as CISA, CRISC, CISM or CISSP are preferred.

Responsibilities

• Develop and implement strategic approaches for evaluating technology and cybersecurity risks, control effectiveness, and audit readiness.
• Lead complex risk assessments, control reviews, RCSAs, audit support activities, and process evaluations.
• Develop and execute risk management frameworks aligning technology with regulatory requirements.
• Partner with Technology, Cybersecurity, Risk Management, Internal Audit, and business stakeholders.
• Drive adherence to risk management and governance frameworks and advise on regulatory expectations.
• Lead and manage complex workstreams with limited oversight.
• Coordinate preparation for regulatory examinations, internal audits, and external reviews.
• Collaborate with senior leaders to support risk governance and regulatory compliance.
• Identify opportunities to enhance risk methodologies and control evaluations.
• Mentor analysts and risk professionals and contribute to training programs.

Skills

Risk management

Cybersecurity

Audit

Regulatory knowledge

Stakeholder management

Leadership

Mentoring

Education

Bachelor's degree

Master's degree

Tools

CISA

CRISC

CISM

CISSP

Job description

Role Overview

This role is four days onsite at our Bridgeport, CT, location, with the flexibility to work from home one day per week.

Overview

Leads risk assessments and control evaluations for complex Technology initiatives, influencing the organization's risk framework and providing advanced guidance to leadership for informed decision-making aligned with business objectives and regulatory expectations.

Serves as a trusted risk and audit partner, helping ensure effective governance, controls, compliance, and resiliency across Technology functions.

Primary Responsibilities

Develop and implement strategic approaches for evaluating technology and cybersecurity risks, control effectiveness, and audit readiness across critical technology capabilities.

Lead complex risk assessments, control reviews, risk and control self-assessments (RCSAs), audit support activities, and process evaluations to identify, assess, and communicate risks and control gaps.

Develop and execute risk management frameworks and programs that align technology practices with business objectives, internal control standards, and regulatory requirements.

Partner with Technology, Cybersecurity, Risk Management, Internal Audit, and business stakeholders to assess control environments, evaluate risk exposure, and support remediation of identified issues.

Drive adherence to risk management, governance, and control frameworks while providing expert guidance on regulatory expectations, audit requirements, and industry best practices.

Lead and independently manage complex bodies of work, including risk reviews, control assessments, audit engagement support, regulatory preparedness activities, and cross-functional initiatives with limited oversight.

Coordinate preparation for regulatory examinations, internal audits, and external reviews, including reviewing responses for accuracy, managing documentation requests, organizing exam materials, and tracking follow-up actions.

Collaborate with senior leaders across Technology, Cybersecurity, Risk, Internal Audit, and Regulatory Affairs to support effective risk governance and regulatory compliance.

Identify opportunities to enhance risk management and control evaluation methodologies and recommend improvements that strengthen the organization's overall risk posture.

Provide guidance and mentorship to analysts and risk professionals, sharing expertise in risk management, audit practices, controls, and regulatory expectations.

Contribute to the design and delivery of training programs that strengthen knowledge of technology risk, cybersecurity risk, governance, controls, and audit readiness.

Understand and adhere to the Company's risk and regulatory standards, policies, and controls in accordance with the Company's Risk Appetite.

Identify risk-related issues requiring escalation.

Promote an environment that supports belonging and reflects the M&T Bank brand.

Maintain M&T internal control standards, including timely implementation of audit recommendations, regulatory actions, and remediation activities.

Complete other related duties as assigned.

Scope of Responsibilities

This role primarily interacts with senior people leaders within the Technology and Cybersecurity teams, senior people leaders of Technology and Cybersecurity Risk, and internal partners such as the Risk Division, Internal Audit, and Regulatory Affairs.

Work is accomplished with periodic direction.

The position exercises judgement in selecting methods, techniques, and evaluation criteria in obtaining results.

It exerts significant latitude in determining objective of assignment and takes calculated risks with consultation from expert.

This role may present to Regulators under direction of senior Technology and Cybersecurity Risk leaders.

Education and Experience Required

Bachelor's degree and a minimum of 7 years’ relevant work experience, or in lieu of a degree, a combined minimum of 11 years’ higher education and/or work experience

Demonstrated expert knowledge of Technology, Cybersecurity, Audit and/or risk principles

Minimum of 6 years' relevant work experience in or with the specific Technology, Audit, Cybersecurity risk area and/or business unit

Education and Experience Preferred

Master's degree in Information Technology, Computer Science, Cybersecurity, Business Administration, Accounting, Finance, Law, or a related field.

Experience working within banking, financial services, fintech, money movement, or other highly regulated industries.

Professional certifications such as: Certified Information Systems Auditor (CISA) Certified in Risk and Information Systems Control (CRISC) Certified Information Security Manager (CISM) Certified Information Systems Security Professional (CISSP)

Strong understanding of audit practices, internal controls, risk assessment methodologies, and regulatory expectations

Demonstrated ability to independently structure and lead complex workstreams in ambiguous environments.

Excellent communication, stakeholder management, and executive presentation skills.

Experience partnering with senior leadership to develop solutions aligned with business objectives and regulatory requirements.

Proven ability to influence stakeholders, build consensus, and drive outcomes across cross-functional teams.

Ability to mentor and coach peers while serving as a trusted advisor on risk, controls, and audit-related matters.

Pay and Location

M&T Bank is committed to fair, competitive, and market-informed pay for our employees.

The pay range for this position is $150,800.00 - $251,300.00 (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.

Location Bridgeport, Connecticut, United States of America

About M&T Bank

Great companies have an enduring sense of purpose. At M&T, our purpose is a simple one: make a difference in people’s lives and uplift the communities we serve.

M&T Bank Corporation is a financial holding company headquartered in Buffalo, New York. M&T’s affiliates offer advice, guidance, expertise and solutions across the entire financial spectrum, combining M&T Bank’s traditional banking services with the wealth management and institutional capabilities offered by Wilmington Trust.

M&T Bank has a network of over 1,000 branches and 2,200 ATMs that span 12 states from Maine to Virginia and Washington, D.C. For more than 165 years, M&T has strived to take an active role in our communities and build long-lasting relationships with our customers.

We are a bank for communities—combining the capabilities of a large bank with the care of a locally focused institution.

As an employer of choice, we are proud to offer competitive benefits ranging from medical and retirement to forty hours of paid volunteer time, each year.

Our core values – integrity, ownership, collaboration, curiosity, and candor – drive the work we do.

We seek to further build upon our record of success by bringing in top talent and fresh skill sets while continuing to support the growth and development of all our team members.

View M&T’s Human Capital Report to learn more.

M&T Bank is unwavering when it comes to providing equal employment opportunities to all employees and applicants without regard to race, color, national origin, religion, ethnicity, sex, gender identity, age, disability, citizenship, pregnancy, veteran status, military status, marital status, sexual orientation, genetic information or any other characteristic protected under applicable federal, state or local laws.

M&T Bank Corporation has policies and procedures in place to promote a drug free workplace.