Senior Business Information Security Officer (Cybersecurity)

Location: Hybrid, Buffalo, New York, United States

Salary: $148,300–$247,100 annual USD

What you will do

• Serve as a senior cybersecurity advisor to technology, client-facing, and enterprise business unit executives.
• Build strategic relationships and integrate security-by-design controls throughout business initiatives.
• Identify threats and vulnerabilities, communicate mitigations, and incorporate findings into strategic risk management plans.
• Define cybersecurity performance indicators and metrics with business, technology, and cybersecurity leaders.
• Advise executives on cybersecurity investments, risk issues, compliance, and business enablement.
• Design, implement, maintain, and improve internal controls while escalating issues and addressing audit and regulatory findings.

Requirements

• Bachelor’s degree and at least 9 years of relevant experience, including 7 years in an operationally focused security practitioner role; alternatively, 13 years of combined higher education and work experience with at least 7 relevant years.
• At least 5 years of experience working with business leadership and enterprise projects.
• Strong knowledge of cybersecurity technologies, threats, risk mitigations, technical controls, data protection, policies, regulations, and security frameworks.
• Ability to translate complex cybersecurity issues into clear business strategies and communicate effectively with technical and executive stakeholders.
• Experience building strategic plans and influencing initiatives across senior leadership, project management, technology, cybersecurity, and business teams.
• Ability to work autonomously, prioritize changing demands, adapt leadership and influence styles, and deliver results.

Nice to have

• At least 15 years of experience in cybersecurity, technology risk, or business unit roles.
• Master’s degree in information assurance, computer science, business administration, or a related field.

Culture & Benefits

• Work in partnership with technology and business line executive leaders, cybersecurity leaders, and technology executives.
• Operate with a high degree of autonomy while aligning business-unit imperatives with bank-wide priorities.
• Support an environment that promotes belonging and reflects the M&T Bank brand.
• Follow established risk appetite, internal control, audit, and regulatory standards.