Sponsorship is NOT available for this position.
Relocation to Buffalo, NY is mandatory for this role.
This role offers a hybrid work schedule; offering the flexibility to work remotely two days a week, while providing the opportunity for in-person collaboration.
Overview:
Supports Cybersecurity and Technology Risk Management and governance with a focus on the development and maintenance of Cybersecurity policies and standards and the evaluation of Cybersecurity legal and regulatory requirements.
Primary Responsibilities:
-
Research, recommend, and develop new Cybersecurity and Technology policies and standards content based on legal and regulatory requirements and industry best practices. Update and enhance existing Cybersecurity policies and standards as needed
-
Enforce Cybersecurity policies, standards and other governance; Promote awareness through daily activities and participation in governance committees.
-
Maintain current knowledge of the Bank's Cybersecurity and Technology policies, standards and procedures as well as industry best practices and proposed new guidelines and regulations.
-
Identify and evaluate Cybersecurity risk to the business; Develop risk mitigation strategies, as appropriate.
-
Execute Cybersecurity Risk Management Program in accordance with Bank policies and procedures. Analyze results and prepare recommendations to address identified risk and/or enhance the overall program. Represent Cybersecurity in risk management discussions and consultations across the Bank.
-
Provide current data for performance metrics and reporting.
-
Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance with the Company’s Risk Appetite. Identify risk-related issues needing escalation to management.
-
Promote an environment that supports diversity and reflects the M&T Bank brand.
-
Complete other related duties as assigned.
Scope of Responsibilities:
This position requires regular interaction with non-management, middle management, senior management, and business units and partners, as well as occasional interaction with the Chief Information Security Officer.
Education and Experience Required:
Bachelor’s degree and a minimum of 5 years’ relevant work experience, or in lieu of a degree, a combined minimum of 7 years’ higher education and/or work experience, including a minimum of 5 year relevant work experience
Strong knowledge of Cybersecurity principles, frameworks (e.g., NIST CSF, CRI Profile), and regulations (23 NYCRR 500, GLBA/Interagency Guidelines, FFIEC)
Experience conducting research and evaluating information for reliability, validity, objectivity and relevance
Strong ability communicating complex information, concepts or ideas in a confident and well-organized manner through verbal, written and/or visual means
Strong knowledge of established risk management processes (e.g., methods for assessing and mitigating risk) and the ability to apply the concepts
#policy, #standards, #writing, #governance, #IT, #cyb
M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $82,783.41 - $137,972.36 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.
LocationBuffalo, New York, United States of America
Top Skills
What We Do
Waste Connections, Inc. is an integrated solid waste services company that provides waste collection, transfer, disposal and recycling services in mostly exclusive and secondary markets in the U.S. and Canada. Through its R360 Environmental Solutions subsidiary, the Company is also a leading provider of non-hazardous oilfield waste treatment, recovery and disposal services in several of the most active natural resource producing areas in the United States, including the Permian, Bakken and Eagle Ford Basins. Waste Connections serves more than six million residential, commercial, industrial, and exploration and production customers from a network of operations in 39 states, six provinces and the District of Columbia. The Company also provides intermodal services for the movement of cargo and solid waste containers in the Pacific Northwest.
Our corporate strategy targets secondary and suburban markets that have strong demographic growth trends and where competitive barriers to entry can be developed. We seek to avoid highly competitive, large urban markets and target markets where we can provide either non-integrated or integrated solid waste services under exclusive arrangements, or markets where we can be integrated and attain high market share. We are a leading provider of solid waste services in most of our markets, and approximately 50% of our revenues are derived from market areas where we have franchise or exclusive rights to provide our waste services.
