Head of Cybersecurity Defense Operations

M&T Bank • Buffalo, NY

6d • $167,600 - $279,400 • Onsite

About The Position

Manages the activities and strategic priorities of multiple cybersecurity departments. Responsible for financial and human capital planning to ensure short- and long-term strategic efforts support and protect the Bank from internal and external cybersecurity threats. This role oversees 2 or more functions/teams or a department within Cybersecurity and may act as a lead Cybersecurity representative with Regulators. Accountable for developing and executing budget for functions/teams they oversee. This role manages one or more functions/teams/departments within Cybersecurity, including Operations and Threat, Cloud and Architecture, Security Assessments and Business Information Security Officers (BISO), Identity and Access Management, and Security Engineering. The Head of Cybersecurity Defense Operations is responsible for driving the development and execution of comprehensive cybersecurity strategies, ensuring alignment with overall cybersecurity vision and organizational needs. They partner with Cyber senior leadership and Finance to direct business and financial resources effectively based on risk assessments and strategic priorities. This role monitors and reviews the effectiveness of risk measurement strategy, updates assessments and procedures in partnership with technology risk and enterprise risk teams, and communicates risk status to senior management. They lead strategic initiatives across Cybersecurity that drive continuous improvement and operational efficiencies, while maintaining or improving overall outcomes. Establishing and maintaining incident response policies and procedures, ensuring they align with industry best practices and regulatory requirements, is also a key responsibility. The Head of Cybersecurity Defense Operations collaborates with engineering and architecture teams to select appropriate security technologies, leverages industry knowledge to inform best practices and policies, and may represent the organization in industry forums and regulatory engagements. Furthermore, this role is responsible for creating a strong workforce plan, guiding the creation and maintenance of internal Cybersecurity training needs, developing Cybersecurity strategy and programs, and partnering with procurement and vendor management teams to assess vendor security controls. They exercise usual authority of a manager concerning staffing, performance appraisals, promotions, salary recommendations, performance management, and terminations. The role requires understanding and adherence to the Company’s risk and regulatory standards, policies, and controls, and designing, implementing, maintaining, and enhancing internal controls to mitigate risk. Promoting an environment that supports belonging and reflects the M&T Bank brand, and maintaining M&T internal control standards are also essential.

Requirements

• Bachelor's degree and a minimum of 9 years’ relevant work experience, or in lieu of a degree, a combined minimum of 13 years’ higher education and/or work experience.
• Demonstrated expert knowledge of Cybersecurity principles.
• Minimum of 8 years’ work experience in/with the specific cybersecurity function.
• Minimum 3 years’ managerial experience.

Nice To Haves

• Eligibility to obtain a Top Secret/Sensitive Compartmented Information (TS/SCI) US Government Security Clearance
• Minimum of 8 years’ managerial experience
• Proven ability to mentor and lead cybersecurity people leaders and teams of people.
• Excellent communication skills.
• Excellent interpersonal skills.
• Proven ability to effectively convey message to technical and business leaders.
• Experience effectively influencing senior leaders.
• Proven experience strategically prioritizing across competing priorities and quickly changing landscape.
• Experience in a highly regulated industry environment, including building and maintaining effective relationships with external stakeholders.
• Advanced understanding of financial services regulations, compliance requirements, and risk management practices.
• Experience translating a strategic business objective into strategic cyber plans, programs, and initiatives.
• Expertise in cybersecurity innovation and emerging technologies.

Responsibilities

• Drive the development and execution of comprehensive cybersecurity strategies, ensuring alignment with overall cybersecurity vision and organizational needs.
• Partner with Cyber senior leadership and Finance to direct business and financial resources effectively based on risk assessments and strategic priorities.
• Monitor and review the effectiveness of risk measurement strategy, update assessments and procedures in partnership with technology risk and enterprise risk teams and communicate risk status to senior management.
• Lead strategic initiatives across Cybersecurity that drive continuous improvement and operational efficiencies, while maintaining or improving overall outcomes.
• Establish and maintain incident response policies and procedures, ensuring they align with industry best practices and regulatory requirements.
• Collaborate with engineering and architecture teams to select appropriate security technologies that align with overall technology roadmap and cybersecurity goals.
• Leverage industry knowledge and expertise to inform best practices and policies, ensuring continued compliance with applicable laws and regulations.
• May represent organization in industry forums and regulatory engagements to understand and address cybersecurity-related legal and regulatory requirements.
• Create strong workforce plan to meet business needs, including (but not limited to) mentoring and coaching high potential team members, developing career paths and succession planning for key roles, identifying training needs and gaps, and establishing culture of knowledge sharing and collaboration.
• Guide creation and maintenance of internal Cybersecurity training needs to deliver security awareness and training programs across the Bank.
• Develop Cybersecurity strategy and programs that strategically meets the needs and addresses the challenges of the organization.
• Partner with procurement and vendor management teams to assess vendor security controls, conduct due diligence, and negotiate appropriate security provisions in contracts.
• Exercise usual authority of a manager concerning staffing, performance appraisals, promotions, salary recommendations, performance management and terminations.
• Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues needing escalation to management.
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned.

Benefits

• The pay range for this position is $167,600.00 - $279,400.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager