Privileged Access Manager

M&T Bank•Buffalo, NY

1d•$139,700 - $232,900

About The Position

Manages the activities and strategic priorities of one or multiple cybersecurity teams, with responsibility for financial and human capital planning to support the Bank’s short- and long-term cybersecurity priorities. The role oversees at least two Cybersecurity functions or teams, works with minimal direction, and develops team goals based on Cybersecurity imperatives. It is accountable for informing and meeting the budget for the functions or teams it oversees and may present to regulators. Depending on the teams assigned, areas of responsibility may include operations and threat management; cloud and architecture; security assessments and Business Information Security Officers; identity and access management; or security engineering. The manager typically leads a team of 10–20 individual contributors and managers, and exercises managerial authority over staffing, performance, promotions, salary recommendations, and terminations. The position partners with the CISO, Cybersecurity Directors and Senior Managers, technology teams, business leaders, and other stakeholders. It supports the Bank’s security, risk, regulatory compliance, workforce development, internal control, and information security training objectives. The position is located in Buffalo, New York. The annual pay range is $139,700–$232,900 USD.

Requirements

Bachelor’s degree and at least 7 years of relevant work experience, or, in lieu of a degree, a combined minimum of 11 years of higher education and/or work experience.
Demonstrated expert knowledge of Cybersecurity principles.
At least 6 years of work experience in or with the specific cybersecurity function.
At least 2 years of managerial experience.

Nice To Haves

At least 6 years of managerial experience.
Proven ability to mentor and lead cybersecurity individual contributors.
Excellent communication skills.
Excellent interpersonal skills.
Ability to effectively articulate messages to technical and business teams.
Experience effectively influencing peers and leaders.
Experience prioritizing competing priorities in a quickly changing landscape.
Experience in a highly regulated industry environment.
Proficient understanding of financial services regulations, compliance requirements, and risk management practices.
Ability to translate business objectives into strategic cyber plans, programs, and initiatives.

Responsibilities

Lead strategic planning for cyber initiatives within areas of oversight and align cybersecurity objectives with business goals.
Prioritize work within areas of oversight and raise priorities to senior leadership and Finance for inclusion in financial plans.
Develop risk mitigation strategies, controls, and frameworks in partnership with Technology Risk.
Manage initiatives to identify and implement new or updated methodologies for proactively addressing risks.
Partner with incident response teams to regularly review, update, and test plans in line with emerging threats and best practices.
Oversee technology and systems, influence senior leadership on system selection, and lead system and architecture design after selection.
Interpret regulatory and compliance requirements and partner with Risk, Legal, and Engineering teams to implement necessary controls.
Present in regulatory engagements as needed to understand and address cybersecurity-related legal and regulatory requirements.
Develop workforce plans, mentor and coach high-potential team members, create career paths, plan succession for key roles, identify training needs and gaps, and establish a culture of knowledge sharing and collaboration.
Contribute to delivery of the Bank-wide information security training and awareness program.
Collaborate with Technology and business leaders to create programs that meet Cybersecurity objectives and organizational needs.
Exercise managerial authority concerning staffing, performance appraisals, promotions, salary recommendations, performance management, and terminations.
Adhere to Company risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite.
Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis.
Identify risk-related issues that need escalation to management.
Promote an environment that supports belonging and reflects the M&T Bank brand.
Maintain M&T internal control standards, including timely implementation of internal and external audit points and applicable issues raised by external regulators.
Complete other related duties as assigned.
Manage one or more Cybersecurity functions or teams, which may include Operations and Threat; Cloud and Architecture; Security Assessments and Business Information Security Officers; Identity and Access Management; or Security Engineering.
Inform and meet the budget for the functions or teams overseen.