Specialist - Technology and Cybersecurity Risk - Regulatory Support

M&T Bank•Buffalo, NY

6d•$103,000 - $171,600

About The Position

Overview: Guides the risk analysis process providing direction for risk mitigation. Collaborates with cross-functional risk, technology, cybersecurity, and business teams to enhance risk policies and contribute to organizational resilience. Primary Responsibilities: Formulate and implement risk management processes, inclusive of reporting and documentation to ensure compliance with regulatory, committee, and leadership reporting. Lead compliance efforts for respective function, ensuring adherence to industry regulations and standards through internal standards. Partner strategically with cross-functional teams and senior leadership to ensure swift and effective action when events occur which are beyond or potentially beyond the Bank's risk appetite. Lead the preparation and response to regulatory engagements, including preparing materials, coordinating responses from various individuals, aiding in exam management (template folders, collection of first day letter and follow-up requests). Assess implications of new methodologies and recommend ways for Technology and Cybersecurity Risk leadership to innovate the risk management strategy and their integration while maintaining a proactive stance against potential risks. Recommend enhancements to Technology and Cybersecurity risk management training programs to increase technology's overall awareness and application of best practices. Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance with the Company’s Risk Appetite. Identify risk-related issues needing escalation to management. Promote an environment that supports diversity and reflects the M&T Bank brand. Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable. Complete other related duties as assigned. Scope of Responsibilities: This position will interact primarily with individual contributors and people leaders within the Technology and Cybersecurity teams. It will have occasional to frequent interaction with senior leaders of Technology, Cybersecurity, the Risk Division and Internal Audit. Effectively communicate applicable requirements to cross-functional partners throughout the organization (i.e. line-of-business, Finance, Credit, etc.). Work is accomplished with limited direction, and the incumbent exercises judgement in selecting methods, techniques, and evaluation criteria in obtaining results. It exerts significant latitude in determining objective of assignment. This role will prepare materials for Regulators under the direction of senior Technology and Cybersecurity Risk leaders. Participate in the development of tailored regulatory presentations. Act in a consultative capacity to review and critique presentation materials and/or talking points of others with respect to bank regulatory matters and implications. Assist with coordination of correspondence to regulatory agencies, examination management (as applicable) and responding to regulatory requests. Ensure communications and submissions meet applicable requirements. Establish, enhance, and maintain consistency of regulatory related correspondence and reporting across functional areas.

Requirements

Bachelor's degree and a minimum of 5 years’ relevant work experience, or in lieu of a degree, a combined minimum of 9 years’ higher education and/or work experience
Demonstrated advanced knowledge of Technology and Cybersecurity risk principles
Minimum of 4 years' relevant work experience in or with the specific Technology and/ or Cybersecurity risk area and/or business unit

Nice To Haves

Solid ability to organize projects and keep efforts on track.
Advanced ability to apply critical thinking skills and to challenge management where needed.
Strong interpersonal skills, ability to communicate in an articulate and professional manner and influence without authority.
Effective written and verbal communication skills.
Excellent ability to strategically seek critical information, and ensure responses convey complex and/or nuanced concepts in an effective and understandable manner.
Ability to recognize interrelationships and interdependencies.
Ability to independently manage work across initiatives, exhibiting a high degree of flexibility, productivity, and ability to multi-task while maintaining attention to detail.
Excellent communication and interpersonal skills
Prior experience prioritizing across competing priorities and quickly changing landscape, and deliver results aligned with priorities

Responsibilities

Formulate and implement risk management processes, inclusive of reporting and documentation to ensure compliance with regulatory, committee, and leadership reporting.
Lead compliance efforts for respective function, ensuring adherence to industry regulations and standards through internal standards.
Partner strategically with cross-functional teams and senior leadership to ensure swift and effective action when events occur which are beyond or potentially beyond the Bank's risk appetite.
Lead the preparation and response to regulatory engagements, including preparing materials, coordinating responses from various individuals, aiding in exam management (template folders, collection of first day letter and follow-up requests).
Assess implications of new methodologies and recommend ways for Technology and Cybersecurity Risk leadership to innovate the risk management strategy and their integration while maintaining a proactive stance against potential risks.
Recommend enhancements to Technology and Cybersecurity risk management training programs to increase technology's overall awareness and application of best practices.
Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance with the Company’s Risk Appetite.
Identify risk-related issues needing escalation to management.
Promote an environment that supports diversity and reflects the M&T Bank brand.
Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
Complete other related duties as assigned.
Effectively communicate applicable requirements to cross-functional partners throughout the organization (i.e. line-of-business, Finance, Credit, etc.).
Prepare materials for Regulators under the direction of senior Technology and Cybersecurity Risk leaders.
Participate in the development of tailored regulatory presentations.
Act in a consultative capacity to review and critique presentation materials and/or talking points of others with respect to bank regulatory matters and implications.
Assist with coordination of correspondence to regulatory agencies, examination management (as applicable) and responding to regulatory requests.
Ensure communications and submissions meet applicable requirements.
Establish, enhance, and maintain consistency of regulatory related correspondence and reporting across functional areas.