Enterprise Risk Advisor - Enterprise Risk Office

Overview:

This position is responsible for the development and delivery of second line Enterprise Risk Management services in line with area policies, industry standards, and management expectations. Within this team, the role holder would be expected to have a working knowledge of Risk and Control Frameworks, Issues Management, and Key Risk Indicators. The position is responsible for advising line management and senior leadership as it relates to risk of the businesses or functions supported and is expected to coordinate information sharing with other risk partners.  The position will be responsible for developing and delivering activities that help the Bank keep pace with the evolving landscape of the risk management environment and identifying continuous improvements in the execution of practices within the Risk Management Division. The position requires the ability to independently execute one or more activities in support of the services described above and will play a key role with supporting the development of program level activities.  Activities performed will help the Bank and areas supported adhere to the expectations of the enterprise risk framework and the expectations of key stakeholders, up to and including the Board. The position has a comprehensive understanding of the business or functions it supports and may be considered a subject matter expert.   

Primary Responsibilities:

• Lead and may be responsible for one or more Enterprise Risk Management activities within a similar area or will manage activities that span across the Bank. Work horizontally across the Bank to develop, implement, and maintain elements of the Enterprise Risk Management Framework—including policies, standards, guidelines, metrics, and reports—in collaboration with stakeholders across the Bank to ensure they remain aligned with the risk environment, Risk Appetite, and regulatory expectations. Monitor adherence and escalate material or unresolved issues to management. (Policies, standards, guidelines, metrics, reports). 
• Independently perform complex, judgment-based evaluations of key risk processes and related work products to identify gaps or deficiencies, support informed business decisions, and confirm remediation appropriately addresses the risk. May review the work of others to ensure it was accurately prepared and appropriate for the intended audience. 
• Collect and analyze data; develop routine and ad hoc reports that monitor risk-program adherence and project activity; identify reporting improvements; and prepare and present decision-useful materials for business partners, senior management, and risk committees.
• Serve as a liaison among first-line businesses, second-line risk partners, senior leaders, Legal, and Internal Audit to promote timely two-way communication and escalation of material or unresolved concerns. Represent the department in risk committees, management forums, audits, regulatory inquiries, examinations, and related status updates, as assigned.

• Lead or participate in the design, implementation, and continuous improvement of processes, projects, programs, and plans that support short- and long-term business objectives and resolve risk issues. Draft, review, and maintain procedures, process documentation, training, and related materials, and enhance information used to assess and communicate risk.

• Act as representative for departmental system support, coordinating with internal business partners, vendors and technology to address issues for the department. 
• Complete required Bank, Division, and Department training; proactively maintain relevant professional and organizational knowledge, including new Bank initiatives and methodologies. Limited travel may be required for seminars and conferences.
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned.

Scope of Responsibilities:

The incumbent will be responsible for Enterprise Risk Management activities as assigned, as well as, build the necessary Bank-wide partnerships to support the enterprise risk division.  In addition, the incumbent will partner with Risk Division leaders, Technology and work alongside business partners to ensure the necessary governance and controls are in place to control and monitor risk. Activities may include:

• Support the CRO and the Bank through the management of governance and enterprise risk processes.
• Support activities for laws and rules that apply across the enterprise. 
• Stay abreast of evolving themes in risk, understanding various internal and external factors that may impact the Bank.
• Analyze information to identify risks and trending.
• Support technology, such as the eGRC system, administrative and reporting processes.
• Independently evaluate the area's management of key processes for the effective and efficient mitigation of risk.  
• Provides data, analytics and reporting that support the identification, assessment, monitoring, mitigation, and reporting of all significant risks.
• Develop, administer, and monitor training and precision leadership activities for the Risk Division.
• Support the automation of processes.
• Support risk pillar specific processes as needed.

Managerial/Supervisory Responsibilities:

No direct management but may provide guidance to junior specialists. May serve in a mentoring capacity.

Education and Experience Required:

Bachelor's Degree
8 years experience in risk, reporting and analytics, governance, or other relevant function OR in lieu of degree, combined minimum of 12 years higher education and/or work experience, including 8 years in risk, reporting and analytics, governance, or other relevant function

Education and Experience Preferred:

Master’s degree or MBA
Effectively communicates with others throughout the Bank, including senior management, via phone, email or in person to obtain information necessary for the completion of reporting, project information and issue resolution.
Proficient computer skills (including spreadsheet and word processing software), analytical skills, expert knowledge of applicable laws, written and verbal communications w/ all levels.
Ability to design and implement process, control and system changes.
Knowledge of risk analytics and reporting, including the development, implementation and use of all relevant decision technologies, such as eGRC systems.
Interacts with external peers and members of professional organizations to remain aware of changing or emerging risks and proactively bring key information to team for inclusion/consideration in continuous monitoring and/or other oversight activities.