Senior IAM Governance Specialist

This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week

Responsible for analyzing, documenting, and monitoring compliance with Workforce Identity Access Management (WIAM) policies, procedures, and best practices. Creates new or updates existing processes and governance that ensure resiliency and security of organization.

• Create policies and processes to assist WIAM with consistently monitoring and securing organization.
• Provide governance assistance across common IAM platforms (e.g., SailPoint, Azure AD / Entra ID, CyberArk, PAM solutions).
• Participate in the development, review, and update of strategies, policies and procedures pertaining to various governance areas.
• Research and analyze industry best practices and regulatory requirements and make recommendations for policy enhancements to improve resiliency and security of organization.
• Maintain and implement systems and processes for monitoring compliance to policies and procedures and identifying data for daily business management.
• Analyze and produce insightful reports with recommendations for Cybersecurity senior leadership.
• Partner with Cybersecurity, Technology, and First Line Risk teams and, at times, business lines to proactively mitigate risk through creation of robust policies and procedures.
• Coordinate responses to audit and regulatory requests, by gathering data and actively participating in documentation reviews for accuracy.
• Collaborate with Cybersecurity teams and managers to create process documentation, reporting, and performance metrics.
• Coordinates various aspects of remediation activities by tracking team completion and drafting key actions, timeline, and communication plan.
• Build relationships among stakeholders in Cybersecurity teams to ensure successful creation and implementation of processes.
• Serve as a resource to Cybersecurity teams and managers to educate and assist with projects.

• Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues needing escalation to management.
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned.

• Partners with peers, manager, WIAM team and leadership, First Line Risk team, Internal Audit team, and external auditors
• Determines and develops approach to solutions. Work is evaluated upon completion to ensure objectives have been met. Work is accomplished with periodic check-ins for alignment and limited direction.
• Working knowledge of multiple cybersecurity platforms and applications such as SailPoint, Azure AD / Entra ID, CyberArk, PAM solutions.

• Bachelor's degree and a minimum of 3 years’ relevant work experience, or in lieu of a degree, a combined minimum of 7 years’ higher education and/or work experience inclusive of a minimum 2 years’ work experience in Cybersecurity, Technology, or Risk/Audit
• Demonstrated intermediate knowledge of IAM principles and compliance requirements.

• Intermediate knowledge of IAM platforms: SailPoint, Azure AD, Entra ID, CyberArk, PAM solutions
• Familiar with cloud identity strategy including Azure AD, Entra ID, RBAC, conditional access, and privileged role governance
• Experience with IAM road mapping, tooling strategy and modernization