Workforce IAM Senior Technology Manager (Cybersecurity)

Location: Buffalo, NY, United States; onsite with flexibility to work from home one day per week. Relocation package provided.

Salary: $167,600–$279,400 annual, USD

Company

M&T Bank is a regulated financial services organization focused on protecting digital assets and enabling secure business growth.

What you will do

• Lead the workforce identity and access management strategy, roadmap, governance, and execution.
• Oversee IdP engineering, access provisioning, certifications, role-based access controls, entitlement management, segregation of duties, and identity lifecycle processes.
• Modernize and automate identity services, application onboarding, joiner-mover-leaver workflows, access requests, certification campaigns, governance, and reporting.
• Provide strategic leadership for privileged access management, including credential vaulting, privileged session controls, secrets management, and administrative access monitoring.
• Partner with technology, architecture, infrastructure, application development, risk, audit, compliance, and information security teams to strengthen identity controls.
• Manage risk indicators, audit findings, control effectiveness, regulatory commitments, resources, and cybersecurity improvement initiatives.

Requirements

• Bachelor’s degree and at least 9 years of relevant experience, or a combined minimum of 13 years of higher education and work experience in lieu of a degree.
• Expert knowledge of cybersecurity identity and access management principles.
• At least 8 years of experience in the relevant cybersecurity function.
• At least 3 years of managerial experience.
• Must be based in Buffalo, NY for an onsite role, with only one regular work-from-home day per week.

Culture & Benefits

• Relocation package provided.
• Opportunity to mentor and coach leaders, support succession planning, and develop cybersecurity talent.
• Focus on innovation, accountability, continuous learning, operational excellence, scalability, and risk reduction.
• Work includes regulatory engagements, cybersecurity forums, and industry working groups.
• Full-time employment with compensation informed by knowledge, skills, and experience.