Risk Specialist - Identity Access Management

$60,890 - $101,484/Yr

M&T Bank - Buffalo, NY

Full-time

Buffalo, NY

Credit Intermediation and Related Activities

About the position

As a Workforce IAM Governance Risk Specialist, you will play a crucial role in overseeing the governance and compliance aspects of M&T's identity and access management framework. This position is essential for ensuring that user access rights are effectively managed, security policies are enforced, and regulatory compliance is maintained. You will work closely with cross-functional teams, leveraging your expertise to support the organization's IAM initiatives. The role functions with a moderate level of autonomy, allowing you to utilize peer connections and support from more senior members of the WIAM team to achieve your objectives. Your primary responsibilities will include the oversight of the IAM governance framework, ensuring it aligns with industry best practices, regulatory requirements, and organizational policies. You will collaborate with both internal and external auditors to ensure compliance with IAM-related regulatory requirements, manage audits, and respond to audit inquiries. Adhering to applicable operational risk controls in accordance with company or regulatory standards will be a key aspect of your role. You will also be responsible for developing, implementing, and enforcing access management policies, procedures, and guidelines, ensuring compliance with relevant regulatory bodies. Establishing processes for user provisioning, de-provisioning, and modification of access rights across applications will be critical to ensuring timely and accurate access management. Additionally, you will define and maintain Role-Based Access Control (RBAC) models, ensuring segregation of duties (SoD) and least privilege principles are enforced. Monitoring, reporting, and addressing anomalies of key performance indicators (KPIs) and key risk indicators (KRIs) will be part of your daily tasks. You will need to understand and adhere to the company's risk and regulatory standards, policies, and controls, identifying any risk-related issues that need escalation to management. Promoting an environment that supports diversity and reflects the M&T Bank brand will also be an important aspect of your role. Finally, you will maintain M&T's internal control standards, ensuring timely implementation of internal and external audit points, along with any issues raised by external regulators as applicable.

Responsibilities

• Oversight of IAM governance framework that aligns with industry best practices, regulatory requirements, and organizational policies.
• Collaborate with internal and external auditors to ensure compliance with IAM-related regulatory requirements, manage audits, and respond to audit inquiries.
• Adhere to applicable operational risk controls in accordance with Company or regulatory standards and policies and standards.
• Develop, implement, and enforce access management policies, procedures, and guidelines, ensuring compliance with relevant regulatory bodies.
• Establish processes for user provisioning, de-provisioning, and modification of access rights across applications, ensuring timely and accurate access management.
• Define and maintain Role-Based Access Control (RBAC) models, mapping roles and responsibilities to access privileges, and ensuring segregation of duties (SoD) and least privilege principles are enforced.
• Monitor, report, and address anomalies of key performance indicators (KPIs) and key risk indicators (KRIs).
• Understand and adhere to the Company's risk and regulatory standards, policies and controls in accordance with the Company's Risk Appetite. Identify risk-related issues needing escalation to management.
• Promote an environment that supports diversity and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned.

Requirements

• Minimum of 4 years' higher education and/or work experience
• Prior experience reading and digesting technical information
• Detail-oriented
• Proven written and verbal communication skills
• Prior experience communicating technical problems to management
• Strong customer focus, including ability to manage customer needs and multiple work priorities
• Prior experience providing updates and statuses.

Nice-to-haves

• Background in Identity and Access Management
• Background in control and risk governance
• Excellent documentation skills
• Strong interpersonal and communication skills, with the ability to collaborate effectively with stakeholders at all levels of the organization.
• Detail-oriented with a commitment to accuracy and quality in work deliverables.
• Ability to work independently, manage multiple priorities, and meet deadlines in a dynamic, fast-paced environment.
• Strong problem-solving and critical-thinking abilities.

Benefits

• Competitive salary range of $60,890.34 - $101,483.90 Annual (USD) based on experience and skills.