Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Leads risk analysis for complex initiatives within the Enterprise Data division, serving as the primary First-Line risk representative. This role influences the overarching risk framework, drives data-centric risk governance, and provides advanced guidance to leadership to support informed decision-making aligned with organizational imperatives.

Responsibilities

• Develop and implement strategic approaches for in-depth risk assessments across Enterprise Data.
• Create, maintain, and analyze detailed process maps to identify points of failure, operational inefficiencies, control gaps, and potential risks; translate findings into actionable remediation plans and new or enhanced controls.
• Apply audit-driven methodologies to evaluate Enterprise Data processes, ensuring alignment with regulatory expectations, internal standards, and industry best practices.
• Leverage the DCAM framework to assess data management maturity, identify capability gaps, and guide the Enterprise Data organization toward stronger governance and compliance.
• Develop and execute sophisticated risk management frameworks and programs that align Enterprise Data practices with business objectives and regulatory requirements.
• Drive enforcement of risk and governance frameworks, providing expert guidance and continually assessing regulations, standards, and emerging risks.
• Act proactively as the first-line risk owner, independently identifying emerging risks, control weaknesses, and areas requiring improvement across Enterprise Data.
• Spearhead collaboration among cross-functional teams and senior/executive leadership, ensuring Enterprise Data practices align with broader business goals, regulatory requirements, and enterprise risk expectations.
• Coordinate preparation and response to regulatory engagements, including reviewing responses for accuracy, organizing documentation, and leading exam management activities.
• Encourage innovation in risk management strategies by identifying advanced methodologies to address evolving data-related risks and recommending implementation paths to Technology and Enterprise Data leadership.
• Provide advanced mentorship to mid-level analysts, fostering professional growth and ensuring a high standard of risk analysis and data governance expertise across the team.
• Contribute to the design and delivery of training programs to strengthen organizational knowledge of data risk management, data governance, and associated regulatory expectations.
• Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite.
• Identify risk-related issues requiring escalation.
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain internal control standards, including timely remediation of audit points and regulatory issues.
• Complete other related duties as assigned.

Requirements

• Minimum of 7 years’ relevant work experience, or in lieu of a degree, a combined minimum of 11 years’ higher education and/or work experience.
• Demonstrated expert knowledge of Technology and/or Cybersecurity risk principles.
• Minimum of 6 years' relevant work experience in or with the specific Technology, Cybersecurity risk area and/or business unit.
• Ability to lead critical analysis of work and problem solve.
• Excellent communication and interpersonal skills.
• Experience partnering with leadership to design solutions aligned with business needs.
• Excellent ability to strategically seek critical information, and apply across a broad array of processes.
• Prior experience prioritizing across competing priorities and quickly changing landscape, and execute outcomes aligned with priorities.
• Experience effectively influencing peers and leaders.
• Ability to train and mentor peers.

Skills

• Process mapping
• Audit practices
• Data governance
• DCAM framework
• Risk management
• Cybersecurity risk
• Information Systems Control
• Information Systems Auditor
• Information Security Manager
• Information Systems Security Professional

Location

• Buffalo, New York, United States of America

Work Type

• Hybrid

Experience Level

• 7+ years relevant work experience
• 11+ years combined higher education and/or work experience (in lieu of degree)
• 6+ years relevant work experience in specific Technology/Cybersecurity risk area or business unit

Education Level

• Bachelor's degree
• Master's degree in Information Technology, Computer Science, Cybersecurity, Law, Business Administration, or related field
• Certified in Risk and Information Systems Control (CRISC®)
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP)

Salary/Compensations

• $123,600.00 - $206,000.00 Annual (USD)

About the Company

• M&T Bank is committed to fair, competitive, and market-informed pay for our employees.