Identity and Access Specialist

M&T Bank•Buffalo, NY

About The Position

Overview: Responsible for defining, establishing, maintaining, and managing identities across the organization. Manages and maintains the most complex access to the organization's systems, applications, and data ensuring adherence to security engineering and governance policies and principles, especially when provisioning and de-provisioning access, and remediating issues. Ensures accuracy of provisioning and deprovisioning. Creates and maintains departmental standard operating procedures. Assists in problem resolution of outstanding request issues of less experienced analysts. Primary Responsibilities: Utilize advanced techniques and expertise to provision access while conducting thorough validations, ensuring precise compliance to confidentiality, policies and procedures, and service level agreements. Lead recertification process, auditing permissions against established policies, and addressing any identified discrepancies to maintain a secure access environment. Lead diagnosis and resolution of complex identity and access issues, serving as primary point of escalation for troubleshooting challenges beyond basic concerns. Conduct comprehensive root cause analysis and implement effective solutions to resolve access-related problems. Work with business units to gather complex requirements, communicate access processes, and lead resolution to business unit concerns related to identity and access management. Apply expertise to streamline and enhance identity and access management processes by recommending and leading implementation of improvements to ensure evolving security standards. Lead training for newly hired team members. Facilitate internal Identity & Access Management meetings and lead discussions with business units. Create project plan, identify key project milestones, and implement projects as defined by management. Execute comprehensive remediation efforts to identify and address security vulnerabilities, implement corrective measures, and guide team in resolving complex identity and access issues. Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Identify risk-related issues needing escalation to management. Promote an environment that supports belonging and reflects the M&T Bank brand. Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable. Complete other related duties as assigned. Scope of Responsibilities: Partners with manager, users, peers, and business units. Leverages established directions, policies, and guidelines to accomplish work. Work is reviewed for accuracy and overall quality. Subject matter expert on all identity access provisioning platforms and applications. Supervisory/Managerial Responsibilities: No supervisory responsibilities.

Requirements

Associates degree and a minimum of 4 years’ relevant work experience, or in lieu of a degree, a combined minimum of 6 years’ higher education and/or work experience, including a minimum of 4 years' relevant work experience
Basic understanding of identity and access management
Proficiency with personal computers as well as pertinent project management, word processing, spreadsheet, and database software

Nice To Haves

Bachelor’s degree in Information Technology, Cybersecurity, Business, or related field
Subject matter expert on all identity access provisioning platforms and applications
Proven experience solving problems
Proven experience thinking critically
Strong verbal and written communication skills
Ability to work effectively with all levels of personnel and business partners across the organization
Demonstrated working knowledge of cybersecurity principles and compliance requirements

Responsibilities

Defining, establishing, maintaining, and managing identities across the organization.
Managing and maintaining the most complex access to the organization's systems, applications, and data ensuring adherence to security engineering and governance policies and principles, especially when provisioning and de-provisioning access, and remediating issues.
Ensuring accuracy of provisioning and deprovisioning.
Creating and maintaining departmental standard operating procedures.
Assisting in problem resolution of outstanding request issues of less experienced analysts.
Utilizing advanced techniques and expertise to provision access while conducting thorough validations, ensuring precise compliance to confidentiality, policies and procedures, and service level agreements.
Leading recertification process, auditing permissions against established policies, and addressing any identified discrepancies to maintain a secure access environment.
Leading diagnosis and resolution of complex identity and access issues, serving as primary point of escalation for troubleshooting challenges beyond basic concerns.
Conducting comprehensive root cause analysis and implement effective solutions to resolve access-related problems.
Working with business units to gather complex requirements, communicate access processes, and lead resolution to business unit concerns related to identity and access management.
Applying expertise to streamline and enhance identity and access management processes by recommending and leading implementation of improvements to ensure evolving security standards.
Leading training for newly hired team members.
Facilitating internal Identity & Access Management meetings and lead discussions with business units.
Creating project plan, identify key project milestones, and implement projects as defined by management.
Executing comprehensive remediation efforts to identify and address security vulnerabilities, implement corrective measures, and guide team in resolving complex identity and access issues.
Understanding and adhering to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite.
Identifying risk-related issues needing escalation to management.
Promoting an environment that supports belonging and reflects the M&T Bank brand.
Maintaining M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
Completing other related duties as assigned.