Senior Technology & Cybersecurity Risk Controls Strategist

M&T Bank Corporation; Bridgeport (CT); Hybrid; USD 151,000 - 251,000; Full time

Job summary

M&T Bank is seeking an experienced Controls Testing professional to execute and manage independent testing across Technology, Cybersecurity, and Data domains. You will influence risk outcomes by partnering with Risk Advisors and Risk Owners on risk identification, control coverage, and design adequacy.

You will lead annual testing plan development, perform complex control design reviews, and prepare management reports to drive risk-based decisions.

Qualifications

• Bachelor's degree and a minimum of 7 years’ relevant work experience, or in lieu of a degree, a combined minimum of 11 years’ higher education and/or work experience
• Demonstrated expert knowledge of Technology and/or Cybersecurity risk principles
• Minimum of 6 years' relevant work experience in or with the specific Technology, Cybersecurity risk area and/or business unit
• Experience with NIST (NIST SP800-53 and 800-53a) and related frameworks
• Strong knowledge of cybersecurity principles and industry best practices
• Proven knowledge of IT security principles and implementation methods (e.g., firewalls, AD/LDAP, SAML)
• Skilled in evaluating security controls based on CIA requirements
• Experience managing multiple projects and meeting deadlines

Responsibilities

• Maintain the Controls Testing methodology, procedures, standards, and QA practices
• Lead development and management of Annual Controls Testing Plan
• Direct and execute independent assessments of control design and operating effectiveness
• Provide effective challenge to Risk Advisors and Owners on risk identification and control adequacy
• Lead complex controls testing engagements involving high-risk tech, cybersecurity processes, and data management
• Evaluate remediation effectiveness and confirm root causes are addressed
• Contribute to training programs for risk management and skills development
• Coordinate responses to regulatory engagements and exam management
• Prepare and deliver management reporting on testing results and risk trends
• Adhere to risk and regulatory standards and escalate issues as needed
• Promote diversity and M&T Bank brand
• Maintain internal control standards and audit point closure
• Complete other related duties as assigned

Skills

Technology risk principles

Cybersecurity risk principles

NIST 800-53

Security controls testing

Risk management

Education

Bachelor's degree

Master's degree (preferred)

Tools

Active Directory/LDAP

SAML

Firewalls

Job description

M&T Bank is seeking an experienced Controls Testing professional to execute and manage independent testing across Technology, Cybersecurity, and Data domains. You will influence risk outcomes by partnering with Risk Advisors and Risk Owners on risk identification, control coverage, and design adequacy.

You will lead annual testing plan development, perform complex control design reviews, and prepare management reports to drive risk-based decisions.