Lead Workforce IAM Governance Specialist (Cybersecurity)

Location: Hybrid in Buffalo, NY, United States; four days onsite at the Seneca One Buffalo location and one day per week from home.

Salary: $116,400–$194,000 annual USD.

Company

M&T Bank is a banking organization focused on secure, compliant, and resilient financial operations.

What you will do

• Lead enterprise Workforce IAM governance frameworks, policies, standards, procedures, controls, and operating models.
• Drive IAM strategy, modernization, identity lifecycle management, access certification, RBAC, privileged access governance, segregation of duties, and policy exception management.
• Design and oversee IAM governance reporting, metrics, dashboards, monitoring, risk assessments, and executive presentations.
• Lead IAM audit and regulatory engagements, including evidence collection, documentation reviews, management responses, remediation, and control enhancements.
• Develop remediation plans, track milestones, resolve control gaps, and improve governance maturity in partnership with Cybersecurity, Technology, Risk, Compliance, Internal Audit, auditors, and business stakeholders.
• Provide thought leadership, mentorship, and guidance as a recognized IAM subject matter expert and escalation point.

Requirements

• Bachelor's degree and at least 5 years of relevant work experience, or at least 9 years of combined higher education and/or work experience including at least 4 years in the specific Cybersecurity or Technology area and/or team.
• Advanced knowledge of IAM principles and compliance requirements.
• Significant independent judgment in addressing complex identity governance, compliance, risk management, and cybersecurity challenges with limited direction.
• Advanced knowledge across identity governance, access management, privileged access management, cloud identity, regulatory compliance, and related cybersecurity disciplines.
• Ability to influence stakeholders and drive enterprise initiatives across Cybersecurity, Technology, Risk Management, Compliance, Internal Audit, and business teams without direct authority.

Nice to have

• Advanced knowledge of SailPoint, CyberArk, Microsoft Entra ID (Azure AD), Saviynt, Okta, or comparable IAM and PAM platforms.
• Experience leading IAM transformation, modernization, cloud identity, or enterprise governance initiatives.
• Expertise in identity lifecycle management, access provisioning, access certifications, role management, privileged access governance, and access control frameworks.
• Experience establishing enterprise IAM governance frameworks, policies, standards, and control procedures.
• Knowledge of SOX, FFIEC, NIST, ISO 27001, and related banking regulatory requirements.
• Experience developing IAM roadmaps, strategic plans, and tooling transformation initiatives.
• Excellent written, verbal, presentation, stakeholder management, critical-thinking, analytical, and problem-solving skills.
• Experience translating technical and regulatory requirements into scalable governance processes, policies, and standards.

Culture & Benefits

• Hybrid work arrangement with four required onsite days and one work-from-home day per week.
• Full-time employment with market-informed annual compensation of $116,400–$194,000 USD.
• Work aligned with company risk appetite, internal control standards, regulatory requirements, and audit remediation expectations.
• Environment focused on belonging and reflecting the M&T Bank brand.