Senior Advisor to the Chief Information Security Officer (CISO)

M&T Bank•Buffalo, NY

8d•Onsite

About The Position

The Strategic Advisor to the CISO is a senior executive leader and trusted partner to the Chief Information Security Officer, helping shape and execute the Bank’s enterprise cybersecurity strategy. With a scope and influence comparable to a Deputy CISO, the position focuses on driving strategic execution, delivering measurable business outcomes, and enhancing the effectiveness of the cybersecurity organization, without direct people management responsibility. As a visible industry leader, the Strategic Advisor cultivates key external partnerships, influences cybersecurity best practices, and elevates the Bank’s voice within the broader security community.

Requirements

Bachelor’s degree and a minimum of 11 years’ cybersecurity and/or large technical program experience, which includes a minimum of 7 years’ cybersecurity experience, or in lieu of a degree, combined minimum of 15 years’ higher education and/or work experience including a minimum of 11 years’ cybersecurity and/or large technical program experience with a minimum of 7 years cybersecurity experience
Minimum of 4 years’ managerial experience
US Citizen and eligibility to obtain a US Government Security Clearance (within 12 months of start date)
Advanced knowledge of related cybersecurity functions

Nice To Haves

Previous CISO or Deputy CISO experience at a large financial institution
15+ years of progressive experience in cybersecurity, information security, or technology risk
Senior leadership experience within a large, highly regulated financial institution
Deep knowledge of cloud, data platforms, and modern engineering practices
Proven ability to translate strategy into measurable outcomes at scale
Experience leading complex, cross-functional initiatives
Strong understanding of regulatory expectations and cyber risk frameworks
Experience engaging with regulators, industry bodies, and government partners

Responsibilities

Serve as a trusted advisor to the CISO to on cybersecurity strategy, risk management, and organizational priorities
Advise on cybersecurity strategy with Technology, Enterprise Risk, and Compliance frameworks
Provide thought leadership on emerging threats, industry trends, and leading practices
Advise on emerging technologies, threats, and trends to maintain a leading security posture
Serve as acting CISO, as needed, ensuring continuity of leadership and decision-making
Drive execution of high-priority cybersecurity initiatives, ensuring alignment with business and regulatory expectations
Translate executive-level strategy into actionable plans across security operations, engineering, and risk teams
Drive accountability across initiatives through disciplined tracking of milestones, risks, and outcomes
Evaluate current cybersecurity capabilities and recommend improvements to maturity, resilience, and efficiency
Act as a force multiplier during incidents, priority projects, or periods of heightened risk, supporting coordination and decision-making
Partner with senior technology, risk, audit, and business leaders to ensure integrated cybersecurity outcomes
Support board-level and executive communications, including preparation of materials, briefings, and messaging
Ensure responsible adoption of AI, including governance, risk mitigation, and secure implementation practices
Maintain strong relationships with regulators, law enforcement, and industry groups
Represent the Bank in external forums and contribute to sector-wide cybersecurity initiatives
Enhance the Bank’s reputation as a cybersecurity thought leader