Workforce IAM Governance Specialist (Cybersecurity)

Location: Buffalo, New York, United States. Hybrid schedule with four days onsite at the Seneca One Buffalo location and one day working from home per week.

Salary: $80,900–$134,800 annual USD.

Company

M&T Bank is a banking organization.

What you will do

• Resolve identity and access issues identified through investigations, audits, and business-as-usual reporting.
• Prepare Requests for Change and coordinate remediation across technical teams, including risk assessment, approvals, implementation, and validation.
• Track remediation progress and provide evidence for audits, second-line-of-defense reviews, and regulatory validation.
• Create job aids, process documentation, policies, and procedures for identity governance and cybersecurity controls.
• Monitor and analyze compliance data, reporting insights and recommendations to Cybersecurity leadership.
• Coordinate with Cybersecurity, Technology, First Line Risk, business teams, and security product vendors.

Requirements

• Bachelor's degree and at least 2 years of relevant experience, or a combined minimum of 6 years of higher education and/or work experience, including at least 1 year in Cybersecurity, Technology, or Risk/Audit.
• Working knowledge of IAM principles and compliance requirements.
• Ability to work four days onsite in Buffalo, New York and one day remotely each week.
• Ability to work with established policies, procedures, guidelines, and cybersecurity platforms.
• Ability to collaborate with cybersecurity teams, risk teams, business partners, vendors, and stakeholders at different organizational levels.

Nice to have

• Experience with SailPoint, Azure AD, Entra ID, CyberArk, or PAM solutions.
• Experience with IAM road mapping, tooling strategy, and modernization.
• Knowledge of cloud identity strategy, RBAC, conditional access, and privileged role governance.
• Experience translating technical requirements into clear policies and procedures.
• Knowledge of technology risk principles and compliance requirements.

Culture & Benefits

• Full-time employment with a hybrid work arrangement.
• Work involves maintaining internal controls, addressing audit and regulatory findings, and supporting the company’s risk standards.
• Opportunity to collaborate across Cybersecurity, Technology, First Line Risk, and business functions.