Senior IAM Governance Specialist

M&T Bank • Buffalo, NY

7d • Hybrid

About The Position

Responsible for analyzing, documenting, and monitoring compliance with Workforce Identity Access Management (WIAM) policies, procedures, and best practices. Creates new or updates existing processes and governance that ensure resiliency and security of organization.

Requirements

• Bachelor's degree and a minimum of 3 years’ relevant work experience, or in lieu of a degree, a combined minimum of 7 years’ higher education and/or work experience inclusive of a minimum 2 years’ work experience in Cybersecurity, Technology, or Risk/Audit
• Demonstrated intermediate knowledge of IAM principles and compliance requirements.
• Working knowledge of multiple cybersecurity platforms and applications such as SailPoint, Azure AD / Entra ID, CyberArk, PAM solutions.

Nice To Haves

• Intermediate knowledge of IAM platforms: SailPoint, Azure AD, Entra ID, CyberArk, PAM solutions
• Familiar with cloud identity strategy including Azure AD, Entra ID, RBAC, conditional access, and privileged role governance
• Experience with IAM road mapping, tooling strategy and modernization

Responsibilities

• Create policies and processes to assist WIAM with consistently monitoring and securing organization.
• Provide governance assistance across common IAM platforms (e.g., SailPoint, Azure AD / Entra ID, CyberArk, PAM solutions).
• Participate in the development, review, and update of strategies, policies and procedures pertaining to various governance areas.
• Research and analyze industry best practices and regulatory requirements and make recommendations for policy enhancements to improve resiliency and security of organization.
• Maintain and implement systems and processes for monitoring compliance to policies and procedures and identifying data for daily business management.
• Analyze and produce insightful reports with recommendations for Cybersecurity senior leadership.
• Partner with Cybersecurity, Technology, and First Line Risk teams and, at times, business lines to proactively mitigate risk through creation of robust policies and procedures.
• Coordinate responses to audit and regulatory requests, by gathering data and actively participating in documentation reviews for accuracy.
• Collaborate with Cybersecurity teams and managers to create process documentation, reporting, and performance metrics.
• Coordinates various aspects of remediation activities by tracking team completion and drafting key actions, timeline, and communication plan.
• Build relationships among stakeholders in Cybersecurity teams to ensure successful creation and implementation of processes.
• Serve as a resource to Cybersecurity teams and managers to educate and assist with projects.
• Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite.
• Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis.
• Identify risk-related issues needing escalation to management.
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned.

Benefits

• The pay range for this position is $97,100.00 - $161,800.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior