Operational Risk Advisor (Hybrid - See Job Description for Listed Locations)

M&T Bank•New York, NY
•$125,600 - $209,400•Hybrid

About The Position

This role delivers independent, risk-based challenge and second-line risk management support in alignment with the Operational Risk Management Framework, applicable policies, regulatory expectations, and industry standards. Reporting to an Operational Risk Senior Manager, the advisor provides objective insights to guide and influence business risk management and improve risk management practices. The role assesses risks, threats, and opportunities arising from areas including evolving technologies, customer-facing digital channels, data-driven decisioning, and emerging business models. It requires knowledge of operational risk principles, industry practices, and supported business areas, including technology-enabled process risk, third-party dependencies, data and model risk intersections, resilience, and change management risk. The advisor collaborates with risk partners and stakeholders, including Technology and Product Owners, and supports senior management, risk governance, audit, and regulatory expectations. The position requires sound independent judgment, autonomy, flexibility, and the ability to apply risk concepts and tools where processes may be immature or undocumented. This is a hybrid position requiring in-office work four days a week. It may be based in Buffalo, NY; New York City, NY; Wilmington, DE; Bridgeport, CT; or Boston, MA. The posting also lists New York, New York, United States of America as the location.

Requirements

  • Bachelor’s degree and six years of experience in risk, compliance, legal, audit, or another relevant function; alternatively, a combined minimum of ten years of higher education and/or work experience, including six years in a relevant function.
  • Proficient computer skills, including Excel, PowerPoint, and Power BI.
  • Analytical skills and strong written and verbal communication skills with all levels of management.
  • Working knowledge of relevant regulations and industry standards for Operational Risk Management.

Nice To Haves

  • Working knowledge of enterprise governance, risk, and compliance platforms such as Archer or FusionRM.
  • Expertise in operational risk and control self-assessment, control testing, issue management, and risk event reporting.
  • Six years of progressive-growth experience within Operational Risk Management, Technology Risk Management, and/or Enterprise Risk Management.
  • Hands-on experience developing and/or enhancing Operational Risk tools, metrics, and monitoring reports.
  • Second-line Operational Risk experience with a Category 3 or larger financial institution.

Responsibilities

  • Develop and deliver complex, ad hoc operational risk analysis and analytical reports.
  • Prepare, review, and present clear, well-supported risk opinions and materials for senior management and risk governance forums.
  • Independently oversee and critically review and challenge risk identification, assessment, monitoring, mitigation, and reporting across assigned business areas.
  • Perform gap, control, and root-cause assessments; evaluate the adequacy, effectiveness, timeliness, and sustainability of risk remediation plans; and escalate identified gaps appropriately.
  • Guide and support first-line implementation of the Operational Risk Management (ORM) Framework, and monitor execution for alignment with ORM policies, guidance, and supervisory expectations.
  • Assess issues, control failures, and policy breaches to determine whether first line has adequately identified root causes and developed effective, sustainable remediation plans.
  • Escalate unmitigated risks, emerging issues, and remediation concerns through appropriate governance channels.
  • Deliver objective insights to inform and influence business risk management and the ongoing enhancement of control practices.
  • Collaborate with first- and second-line partners, including technology risk, compliance, model risk, and other risk functions, to enhance risk processes, drive consistency, improve transparency, and deliver value-added risk management outcomes.
  • Stay current on emerging risks, industry trends, and regulatory developments; engage with external peers and professional organizations to inform risk oversight and monitoring activities.
  • Support change initiatives, promote adherence to internal control standards, and support audit and regulatory remediation efforts.
  • May provide guidance to others; has no direct management responsibilities.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service