Senior Manager of Enterprise Risk & Controls

M&T Bank•New York, NY

4d•$157,400 - $262,300•Onsite

About The Position

The Senior Manager of Enterprise Risk & Controls role is part of ERM’s Risk & Control Office, responsible for establishing risk and control standards, providing guidance, training, and assessments. This role collaborates with business lines and corporate functions to support program adoption, including Risk and Control Self-Assessments (RCSA), process mapping, control inventory, control testing, risk event analysis, issue management, remediation tracking, and Key Risk Indicator (KRI) reporting. The position advises line management, senior leadership, and executive leadership on business or function-specific risks and coordinates information sharing with other risk partners. It aims to influence internal and external personnel, manage activities to keep pace with the evolving risk management landscape, and identify continuous improvements within the Risk Management Division. The role may also contribute to future strategy and direction, supporting collaboration and efficiency among risk partners. The individual must function autonomously in overseeing and/or executing risk activities, playing a key role in developing program-level initiatives to ensure adherence to the enterprise risk framework and stakeholder expectations, including the Board. The position requires subject matter expertise in supported businesses or functions, understanding broader business risks and the Bank's overall context.

Requirements

Bachelor's Degree
10 years experience in risk, reporting and analytics, governance, or other relevant function OR in lieu of degree, combined minimum 14 years higher education and/or work experience, including 10 years in risk, reporting and analytics, governance, or other relevant function
Minimum of 5 years managerial or supervisory experience
Effectively communicates with others throughout the Bank, including senior and executive management, via phone, email or in person to obtain information necessary for the completion of reporting, project information and issue resolution.
Ability to convey complex and/or nuanced concepts in an effective and understandable manner.
Proficient computer skills (including spreadsheet and word processing software), analytical skills, working knowledge of applicable laws, written and verbal communications w/ all levels.
Ability to design and implement process, control and system changes.
Knowledge of risk analytics and reporting, including the development, implementation and use of all relevant decision technologies, such as eGRC systems.
Interacts with external peers and members of professional organizations to remain aware of changing or emerging risks and proactively bring key information to team for inclusion/consideration in continuous monitoring and/or other oversight activities.
Demonstrated leadership capabilities.

Nice To Haves

Master’s degree or MBA

Responsibilities

Manage Enterprise Risk & Control Program (Governance, Reporting, Assessment, Coordination, Continuous Improvement and Training)
Establish and maintain key components of the program centering around control taxonomy, control policy, RCSA methodology, issues management standards and escalation protocols.
Provide guidance, advisory support and independent challenge to FLROs to achieve alignment to the requirements in the R&C policy as well as developing and / or strengthening key areas such as RCSA, process mapping and control inventory, control design and testing/assurance alignment, issues management and KRI reporting.
Build an integrated control effectiveness program focused on strengthening the control environment.
Drive enterprise risk aggregation and thematic analysis reporting through governance forums, influencing stakeholders on required enhancements to controls, documentation quality, risk decisions, repeatable findings analysis, cross LOB trends, emerging risks and including escalation where appropriate.
Draw insight and coordination surrounding issues focusing on operational resilience risk across LOBs with respective SLOD / FLROs surrounding business continuity, technology resilience, TPRM, cyber and crisis management readiness.
Responsible for management of one or more Enterprise Risk Management areas of focus across multiple business lines and risk pillars.
Understand and utilize the Risk Management Framework, and develop and implement various elements of said framework.
Provides independent oversight and critical challenge of the identification, assessment, monitoring, mitigation, and reporting of all significant risks and risk practices within the First Line of Defense and throughout the Risk division.
In risk-based and collaborative manner, ensure underlying elements of the risk management framework accurately reflect the risk environment.
Identify gaps or deficiencies, and ensure remediation activities address the risk.
Escalate through the governance structure up to and including senior management / governance committees, as appropriate.
Lead initiatives to analyze various elements of said framework.
Manage, execute or deliver the completion of high-complexity, ad hoc and appropriately detailed reports, spreadsheets and project work related to one or more risk disciplines based on required frequency (e.g. daily, weekly, monthly or quarterly).
Ensure adequate analysis and challenge of existing reporting to identify improvement opportunities.
Manage the collection of data and analysis for presentations for/to senior management and various risk committees.
Prepare and present materials/presentations to business partners, senior and executive management and risk committees.
Provide leadership to the department over highly complex analysis and judgment based work over a standard discipline or a range of disciplines to support business decisions.
Review the work of others for accuracy and serve as a champion supporting the Bank's goals, Department objectives and risk culture.
Serve as primary point of contact, effectively communicating and collaborating with all stakeholders in the Bank including Senior Managers, executive management and the Board, first line risk and other second line risk partners with respect to risk related matters and in a manner in which the Bank manages its risks.
Able to readily discuss and address issues or concerns.
Escalate significant and/or unresolved risk-related matters to Department management.
May interact with State and Federal Regulatory Agencies, and support organizations such as Internal Audit and Legal.
Identify program gaps and develop remediation plans to address those gaps in a timely manner.
Escalate identified gaps to risk governance committees and executive management as necessary.
Continuously enhance the Enterprise Risk Management program elements to improve effectiveness.
Oversee the implementation of enhancements to processes.
Define and participate in the achievement of short and long-term business objectives.
May assist with budget, P&L and other business reporting.
Analyze variances and report to leadership.
Make recommendations on variances and methods to increase efficiency, lower costs, etc.
Implement recommendations upon management approval.
Drive continuous improvement of existing processes and develop new processes/solutions to achieve short and long term business objectives based upon limited information and direction.
Lead/oversee the implementation of departmental procedures and other documentation to demonstrate processes.
Ensure work is performed accurately, timely and in adherence to corporate risk policies, procedures and key risk related controls.
In addition, develop value-added process improvements, resolve risk issues, and enhance reporting and/or information necessary to assess risk.
Make enhancements to processes when necessary to ensure independent oversight.
Lead and/or support efforts to develop and improve training and materials utilized by the department and/or the Bank.
Direct participation in specific regulatory inquiries, examinations and ongoing periodic status updates.
May serve as a departmental representative in discussions with State and Federal Regulatory Agencies, and Internal Audit.
Lead/Participate in various risk committees and other meetings.
Ensure the communication of relevant concerns or positions are taken to appropriate management.
Participate in industry peer groups, forums, and associations that may affect the business/department.
On a limited basis, serve as the departmental representative when other areas of the Bank request a presentation of the department.
Exercise usual authority of a manager concerning staffing, performance appraisals, promotions, salary recommendations, performance management and terminations.
Provide guidance and direction with respect to team members career goals.
Meet Training requirements assigned by the Bank, Division and Department.
Proactively pursue knowledge of new bank initiatives (i.e. Agile project management methodology).
Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance with the Company’s Risk Appetite.
Identify risk-related issues needing escalation to management.
Promote an environment that supports belonging and reflects the M&T Bank brand.
Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
Complete other related duties as assigned
Assist in setting the strategic direction of Enterprise Risk Management activities, as well as, build the necessary Bank-wide partnerships to support the Enterprise Risk division.
Partner with Risk Division leaders, Technology and work alongside business partners to ensure the necessary governance and controls are in place to control and monitor risk.
Support the CRO and the Bank through oversight of governance and enterprise risk processes.
Influencing senior and executive leadership.
Escalate to leadership identified risks or identified.
Inform Risk Division, senior and executive leadership and the Board of risk management activities through discussion and governance of committees.
Management of activities for laws and rules that apply across the enterprise.
Administer Risk Committee activities, such as, ensuring appropriate committee structure, consistent operations and escalation of risks.
Stay abreast of evolving themes in risk, understanding various internal and external factors that may impact the Bank.
Management of technology, such as the eGRC system, administrative and reporting processes.
Evaluation of the area's management of key processes for the effective and efficient mitigation of risk.
Development of data, analytics and reporting that support the identification, assessment, monitoring, mitigation, and reporting of all significant risks.
Development, administration, and monitoring of training and precision leadership activities for the Risk Division.
Support the automation of processes.
Support risk pillar specific processes as needed.
Manage a team of Specialists and/or Advisors.
May manage other Risk Managers.