Workforce IAM Governance Team Lead

M&T Bank Corporation; Buffalo (NY); On-site; USD 116,000 - 194,000; Full time

Benefits offered by this job

Restaurant d'entreprise

Indemnités de stage/alternance

Job summary

M&T Bank Corporation seeks a senior leader to govern Workforce Identity and Access Management, overseeing SailPoint, Azure AD/Entra ID, CyberArk, and PAM, with emphasis on policy, risk mitigation, and resiliency.

Based in Buffalo, NY, this role collaborates with Cybersecurity, Internal Audit, and risk teams to advance governance roadmaps, produce leadership reports, and drive remediation across the organization.

Qualifications

• Bachelor's degree and 5+ years of work experience in cybersecurity or technology, with IAM focus.
• Demonstrated advanced knowledge of IAM principles and compliance requirements.

Responsibilities

• Provide governance leadership across IAM platforms (SailPoint, Azure AD/Entra ID, CyberArk, PAM).
• Define expectations for birthright access, role models, entitlement management, and certification strategies.
• Lead governance strategy for cloud identity including Azure AD/Entra ID, RBAC, conditional access, and privileged role governance.
• Prepare reports and summary materials for senior leadership.
• Partner with Cybersecurity, Internal Audit and risk teams to mitigate enterprise risk.
• Execute responses to internal audits and regulatory requests.

Skills

IAM governance

SailPoint

Azure AD

Entra ID

RBAC

PAM

Risk mitigation

Leadership

Education

Bachelor's degree

Tools

SailPoint

Azure AD

Entra ID

CyberArk

PAM

Job description

This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week.

Overview

Manages the activities of the Workforce Identity Access Management Governance team. Responsible for financial and human capital planning to ensure short- and long-term priorities support and protect the Bank from internal and external cybersecurity threats. Responsible for analyzing, developing, and monitoring compliance with complex cybersecurity IAM policies, procedures, and best practices. Develop new and enhance existing processes and governance that prioritize resiliency and security of organization. Primary Responsibilities:

• Provide governance leadership across common IAM platforms (e.g., SailPoint, Azure AD / Entra ID, CyberArk, PAM solutions).
• Define expectations for birthright access, role models, entitlement management, and certification strategies.
• Ensure governance models are tool aware but tool agnostic, scalable, and not overly reliant on manual effort.
• Lead governance strategy for cloud identity, including Azure AD / Entra ID, RBAC, conditional access, and privileged role governance.
• Establish guardrails and standards for cloud-native access models, hybrid identity, and federated access.
• Serve as a senior advisor during complex access decisions, risk exceptions, and enterprise initiatives.
• Stay ahead of emerging risks in the workforce IAM space, including non human identities (NHI), AI/service accounts, cloud privilege sprawl, and over entitlement.
• Proactively identify control gaps and recommend governance enhancements.
• Contribute to IAM roadmaps, tooling strategy, and long term modernization efforts.
• Prepare reports through gathering, analyzing and summarizing data and information; prepares presentation materials for senior leadership reports.
• Partner with appropriate teams and leadership, First Line Risk, and Internal Audit to proactively mitigate risk through creation and enhancement of comprehensive policy framework.
• Execute comprehensive response to internal audit and regulatory requests, refining processes for efficiency and accuracy.
• Partner with Cybersecurity teams and managers to ensure process documentation, reporting, and performance metrics continuously improve with organizational maturity.
• Create remediation plans and supports team implementation, providing guidance to teams to ensure comprehensive execution against key actions and milestones.
• Foster strong partnerships with stakeholders in Cybersecurity teams to ensure successful development and implementation of the governance framework.
• Recommend key actions and milestones in project plan and leads execution of specification project milestones.
• Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite.
• Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis.
• Identify risk-related issues needing escalation to management.
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned.

Scope of Responsibilities

Primary partners: Cybersecurity Senior Managers and Managers. Stakeholders: Technology team and the Bank. Work is accomplished with limited direction; translates Cybersecurity imperatives to objectives within team. Oversees 1 or more function(s)/team(s) within Cybersecurity. Typically leads a team of 5-10 FTEs (entry to mid-level individual contributors). Provides input for budget as it pertains to specific team needs, and accountable for meeting budget. This role manages one or more functions/teams/departments within Cybersecurity: Identity and Access Management – regulate and secure user access to digital resources, ensuring proper authentication and authorization measures are in place to protect sensitive information and prevent unauthorized access. Functions/teams may include service & delivery, privileged access management, infrastructure & tooling, governance & oversight, monitoring & logging Manager Responsibility: Typically leads a team of 5-10 FTEs (entry to mid-level individual contributors)

Education and Experience Required

Bachelor's degree and a minimum of 5 years’ relevant work experience, or in lieu of a degree, a combined minimum of 9 years’ higher education and/or work experience inclusive of a minimum 4 years’ work experience in/with the specific Cybersecurity or Technology area and/or team Demonstrated advanced knowledge of IAM cybersecurity principles and compliance requirements.

Education and Experience Preferred

Minimum of 2 years’ managerial experience. Proven ability to train and mentor cybersecurity individual contributors. Subject matter expert on IAM platforms: SailPoint, Azure AD, Entra ID, CyberArk, PAM solutions Familiar with cloud identity strategy including Azure AD, Entra ID, RBAC, conditional access, and privileged role governance Experience with IAM road mapping, tooling strategy and modernization

Pay

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $116,400.00 - $194,000.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.

Location

Buffalo, New York, United States of America

M&T Bank

Great companies have an enduring sense of purpose. At M&T, our purpose is a simple one: make a difference in people’s lives and uplift the communities we serve. M&T Bank Corporation is a financial holding company headquartered in Buffalo, New York. M&T’s affiliates offer advice, guidance, expertise and solutions across the entire financial spectrum, combining M&T Bank’s traditional banking services with the wealth management and institutional capabilities offered by Wilmington Trust. M&T Bank has a network of over 1,000 branches and 2,200 ATMs that span 12 states from Maine to Virginia and Washington, D.C. For more than 165 years, M&T has strived to take an active role in our communities and build long-lasting relationships with our customers. We are a bank for communities—combining the capabilities of a large bank with the care of a locally focused institution. As an employer of choice, we are proud to offer competitive benefits ranging from medical and retirement to forty hours of paid volunteer time, each year. Our core values – integrity, ownership, collaboration, curiosity, and candor – drive the work we do. We seek to further build upon our record of success by bringing in top talent and fresh skill sets while continuing to support the growth and development of all our team members. View M&T’s Human Capital Report to learn more.

M&T Bank is unwavering when it comes to providing equal employment opportunities to all employees and applicants without regard to race, color, national origin, religion, ethnicity, sex, gender identity, age, disability, citizenship, pregnancy, veteran status, military status, marital status, sexual orientation, genetic information or any other characteristic protected under applicable federal, state or local laws.

M&T Bank Corporation has policies and procedures in place to promote a drug free workplace.