Privileged Access Manager
About The Position
The Privileged Access Manager manages the activities and strategic priorities of one or multiple cybersecurity teams. The role is responsible for financial and human capital planning to ensure short- and long-term priorities support and protect the Bank from internal and external cybersecurity threats. It oversees a minimum of two Cybersecurity functions or teams, works with minimal direction, and strategizes team goals based on Cybersecurity imperatives. The role typically leads a team of 10–20 full-time employees, including individual contributors and managers, and is accountable for informing and meeting the budget for the functions or teams overseen. The manager may oversee teams in Operations and Threat, Cloud and Architecture, Security Assessments and Business Information Security Officers, Identity and Access Management, or Security Engineering. Primary partners include the CISO, Cybersecurity Directors, and Senior Managers; stakeholders include the Technology team and the Bank. The role may present to regulators. The position leads strategic planning and prioritization for cyber initiatives, develops risk mitigation strategies and controls, oversees technology and system design, and partners across incident response, risk, legal, engineering, technology, and business teams. It also builds workforce capability through mentoring, career development, succession planning, training, and knowledge sharing; contributes to Bank-wide information security training and awareness; and exercises managerial authority over staffing, performance, promotions, salary recommendations, and terminations. The role maintains internal control standards and helps ensure compliance with the Company’s risk and regulatory standards and policies.
Requirements
- Bachelor's degree and at least 7 years of relevant work experience, or, in lieu of a degree, a combined minimum of 11 years of higher education and/or work experience.
- Demonstrated expert knowledge of Cybersecurity principles.
- At least 6 years of work experience in or with the specific cybersecurity function.
- At least 2 years of managerial experience.
Nice To Haves
- At least 6 years of managerial experience.
- Proven ability to mentor and lead cybersecurity individual contributors.
- Excellent communication skills.
- Excellent interpersonal skills.
- Ability to effectively articulate messages to technical and business teams.
- Experience effectively influencing peers and leaders.
- Experience prioritizing competing priorities in a rapidly changing landscape.
- Experience in a highly regulated industry environment.
- Proficient understanding of financial services regulations, compliance requirements, and risk management practices.
- Ability to translate business objectives into strategic cyber plans, programs, and initiatives.
Responsibilities
- Lead strategic planning for cybersecurity initiatives within the functions overseen and align cybersecurity objectives with business goals.
- Prioritize work within the functions overseen and raise priorities to senior leadership and Finance for inclusion in the financial plan.
- Develop risk mitigation strategies, controls, and frameworks with Technology Risk to manage identified risks.
- Manage initiatives to identify and implement new or updated methodologies for proactively addressing risks.
- Partner with incident response teams to ensure plans are regularly reviewed, updated, and tested against emerging threats and best practices.
- Oversee technology and systems, influence senior leadership in system selection, and lead system and architecture design after selection.
- Interpret regulatory and compliance requirements and partner with Risk, Legal, and Engineering to implement necessary controls.
- Present, when needed, in regulatory engagements to understand and address cybersecurity-related legal and regulatory requirements.
- Develop workforce plans, mentor and coach high-potential team members, establish career paths and succession plans, identify training needs and gaps, and foster knowledge sharing and collaboration.
- Contribute to the Bank-wide information security training and awareness program.
- Collaborate with Technology and business leaders to create programs that meet Cybersecurity objectives and organizational needs.
- Exercise managerial authority over staffing, performance appraisals, promotions, salary recommendations, performance management, and terminations.
- Adhere to Company risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite.
- Design, implement, maintain, and enhance internal controls to mitigate risk, and identify risk-related issues requiring escalation.
- Promote an environment that supports belonging and reflects the M&T Bank brand.
- Maintain M&T internal control standards, including timely implementation of internal and external audit points and applicable issues raised by external regulators.
- Complete other related duties as assigned.
- Oversee at least two Cybersecurity functions or teams and inform and meet their budgets.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
