Enterprise Risk and Control Office Program Consultant

Overview:

This position supports the development and delivery of second line Enterprise Risk Management services in line with area policies, industry standards, and management expectations. Within this team, the role holder is expected to have a working knowledge of Risk and Control Frameworks, Issues Management, and Key Risk Indicators. The position supports line management and senior leadership by providing risk-related information and analysis for the businesses or functions supported and coordinating information sharing with other risk partners. The position contributes to activities that help the Bank keep pace with the evolving risk management environment and identifies opportunities for continuous improvement in the execution of practices within the Risk Management Division. The position requires the ability to execute assigned activities in support of the services described above and contributes to the development of program-level activities. Activities performed help the Bank and supported areas adhere to the enterprise risk framework and stakeholder expectations, up to and including the Board. The position has a comprehensive understanding of the business or functions it supports and serves as a knowledgeable resource within its area of responsibility.

Primary Responsibilities:

• Support one or more Enterprise Risk Management activities within a similar area or contribute to activities that span across the Bank.
• Work horizontally across the Bank to drive the development, implementation, and ongoing maintenance of the Risk and Control Program, including its supporting policies, standards, guidelines, metrics, and reporting, in collaboration with stakeholders across the Bank.
• Support the development, implementation, and ongoing maintenance of the Issues Management Program, including related processes, reports, governance, training, and educational materials, to promote consistent issue identification, assessment, escalation, remediation, and closure across the Bank.
• Support complex, judgment-based evaluations of key risk processes and related work products to identify gaps or deficiencies, inform business decisions, and assess whether remediation appropriately addresses the risk. Contribute to quality reviews to help ensure work products are accurately prepared and appropriate for the intended audience. 

• Collect and analyze data; develop routine and ad hoc reports that monitor Control Effectiveness and Issues Management program adherence and project activity; identify reporting improvements; and prepare and present materials for business partners, senior management, and risk committees.

• Support coordination among first-line businesses, second-line risk partners, senior leaders, Legal, and Internal Audit to promote timely two-way communication and escalation of material or unresolved concerns. Assist with departmental participation in risk committees, management forums, audits, regulatory inquiries, examinations, and related status updates, as assigned.
• Support and participate in the design, implementation, and continuous improvement of processes, projects, programs, and plans that advance short- and long-term business objectives and help resolve risk issues. Draft, review, and maintain procedures, process documentation, training, and related materials, and contribute to enhancements in information used to assess and communicate risk.
• Support departmental systems by coordinating with internal business partners, vendors, and technology teams to help address issues for the department. 

• Complete required Bank, Division, and Department training; proactively maintain relevant professional and organizational knowledge, including new Bank initiatives and methodologies. Limited travel may be required for seminars and conferences.
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned.

Scope of Responsibilities:

The incumbent will be responsible for Enterprise Risk Management activities as assigned, as well as, build the necessary Bank-wide partnerships to support the enterprise risk division.  In addition, the incumbent will partner with Risk Division leaders, Technology and work alongside business partners to ensure the necessary governance and controls are in place to control and monitor risk. Activities may include:

• Coordinate governance activities for the Risk and Control Program, Issues Management Program, and Key Risk Metrics, including preparing agendas and materials, documenting decisions, tracking actions, and escalating overdue or material items to support the CRO and enterprise risk committees.
• Partner with Compliance to understand applicable laws, rules, regulatory guidance, and internal requirements and translate into actionable updates to Risk and Control, Issues Management, and Key Risk Metric standards, procedures, controls, and reporting requirements.
• Monitor internal and external risk developments, assess their potential impact on the Bank’s risk profile, and recommend updates to controls, issue priorities, thresholds, and escalation criteria.
• Analyze control performance, issue aging and remediation status, Key Risk Metric results, threshold breaches, and other risk data to identify trends, concentrations, emerging risks, and areas requiring management action.
• Administer Risk and Control Program, Issues Management, and Key Risk Metric records and workflows in the eGRC system; perform data-quality checks; resolve exceptions; and produce accurate, timely governance and management reporting.
• Independently review risk and control assessments, control design and performance evidence, issue documentation, remediation plans, and closure support to identify gaps, challenge conclusions, and confirm alignment with program requirements.
• Develop and maintain dashboards and recurring reports that communicate significant risks, control effectiveness, issue status, remediation progress, and Key Risk Metric performance to business partners, senior management, and risk committees.
• Develop and deliver role-based training, job aids, and leadership communications for Risk and Control, Issues Management, and Key Risk Metric requirements; monitor completion and address recurring knowledge gaps.
• Identify and implement opportunities to automate data collection, validation, workflow notifications, action tracking, and reporting for the Risk and Control Program, Issues Management, and Key Risk Metrics.
• Execute risk-pillar-specific activities by coordinating required assessments, control reviews, issue monitoring, Key Risk Metric analysis, reporting, and escalation in accordance with enterprise program standards.

Managerial/Supervisory Responsibilities:

No direct management but may provide guidance to junior specialists. May serve in a mentoring capacity.

Education and Experience Required:

Bachelor's Degree
4 years experience in risk, reporting and analytics, governance, or other relevant function OR in lieu of degree, combined minimum 8 years higher education and/or work experience, including minimum 4 years in risk, reporting and analytics, governance, or other relevant function 

Education and Experience Preferred:

Effectively communicates with others throughout the Bank, including management, via phone, email or in person to obtain information necessary for the completion of reporting, project information and issue resolution.

Proficient computer skills (including spreadsheet and word processing software), analytical skills, advanced knowledge of applicable laws, written and verbal communications w/ all levels.

Knowledge of risk analytics and reporting, including the development, implementation and use of all relevant decision technologies, such as eGRC systems.