Lead Workforce IAM Governance Specialist

M&T Bank•Buffalo, NY

3d•$116,400 - $194,000•Hybrid

About The Position

The Lead Workforce IAM Governance Specialist leads the development, governance, and continuous improvement of Workforce Identity and Access Management (IAM) policies, standards, processes, and controls. This role serves as an IAM subject matter expert and strategic partner, advancing governance, regulatory compliance, and modernization initiatives to strengthen security, resiliency, and operational effectiveness. The position partners across Cybersecurity, Technology, Risk Management, Compliance, Internal Audit, external auditors, and business stakeholders. It exercises significant independent judgment, operates with limited direction, and serves as an advisor and escalation point for enterprise Workforce IAM governance matters. There are no supervisory responsibilities. The position is based at the Seneca One location in Buffalo, New York, and is onsite four days per week with the flexibility to work from home one day per week. The annual pay range is $116,400 to $194,000; compensation depends on the successful candidate’s knowledge, skills, and experience.

Requirements

Bachelor's degree and at least 5 years of relevant work experience; alternatively, a combined minimum of 9 years of higher education and/or work experience, including at least 4 years of work experience in or with the specific Cybersecurity or Technology area and/or team.
Demonstrated advanced knowledge of IAM principles and compliance requirements.
Advanced knowledge across identity governance, access management, privileged access management, cloud identity, regulatory compliance, and related cybersecurity disciplines.
Ability to exercise significant independent judgment and resolve complex identity governance, compliance, and risk management challenges with limited direction.

Nice To Haves

Advanced knowledge of SailPoint, CyberArk, Microsoft Entra ID (Azure AD), Saviynt, Okta, or comparable IAM and Privileged Access Management platforms.
Experience leading IAM transformation, modernization, cloud identity, or enterprise governance initiatives.
Expertise in identity lifecycle management, access provisioning, access certifications, role management, privileged access governance, and access control frameworks.
Experience establishing enterprise IAM governance frameworks, policies, standards, and control procedures.
Strong knowledge of SOX, FFIEC, NIST, ISO 27001, and related banking regulatory requirements.
Proven experience developing IAM roadmaps, strategic planning efforts, and tooling transformation initiatives.
Ability to influence senior leaders and drive cross-functional initiatives without direct authority.
Demonstrated advanced knowledge of technology risk management principles and compliance requirements.
Excellent written, verbal, presentation, and stakeholder management skills.
Strong critical-thinking, analytical, and problem-solving skills, including the ability to lead resolution of complex governance and risk-related challenges.
Proven experience translating technical and regulatory requirements into scalable governance processes, policies, and standards.

Responsibilities

Lead development and maintenance of enterprise IAM governance frameworks, policies, standards, and procedures.
Develop and evolve IAM strategy, governance models, policies, and operating procedures in partnership with Cybersecurity leadership, Technology, Risk, and business stakeholders.
Evaluate emerging IAM technologies, industry practices, and regulatory requirements to recommend strategic priorities and roadmap initiatives.
Design, implement, and oversee IAM governance reporting, metrics, dashboards, and monitoring to measure risk, compliance, control effectiveness, and operational performance.
Prepare and present risk assessments, governance insights, executive reporting, and strategic recommendations to Cybersecurity leadership and governance committees.
Serve as a primary IAM governance partner across Cybersecurity, Technology, Risk Management, Internal Audit, Compliance, and business leadership to identify and mitigate risk.
Lead IAM audit and regulatory engagements, including evidence collection, documentation reviews, management responses, issue remediation, and control enhancements.
Partner with Cybersecurity teams and managers to improve process documentation, governance reporting, performance metrics, and operational maturity.
Create and oversee remediation plans, monitor milestones, and guide stakeholders toward timely resolution of risks and control gaps.
Build organizational partnerships to support implementation and adoption of IAM governance processes and controls.
Lead strategic IAM initiatives and modernization efforts involving identity lifecycle management, access certification, role-based access control, privileged access governance, segregation of duties, and policy exception management.
Provide thought leadership, mentorship, and guidance to analysts and project teams, promoting IAM best practices and governance standards.
Adhere to company risk and regulatory standards, policies, and controls in accordance with the Company's Risk Appetite.
Design, implement, maintain, and enhance internal controls to mitigate risk; identify risk issues requiring escalation to management.
Promote an environment that supports belonging and reflects the M&T Bank brand.
Maintain M&T internal control standards, including timely implementation of internal and external audit findings and applicable external regulator issues.
Complete other related duties as assigned.