IAM Governance Team Lead (Cybersecurity)

Location: Buffalo, New York, United States; four days onsite at the Seneca One Buffalo location and one day remote per week

Salary: $116,400–$194,000 annual, USD

Company

M&T Bank is a banking organization focused on protecting financial systems, customer information, and digital resources through cybersecurity and risk controls.

What you will do

• Lead the Workforce Identity and Access Management Governance team and oversee a team of 5–10 cybersecurity individual contributors.
• Provide governance leadership across SailPoint, Azure AD/Entra ID, CyberArk, and privileged access management platforms.
• Define standards for birthright access, role models, entitlement management, access certifications, RBAC, conditional access, and privileged roles.
• Establish scalable guardrails for cloud-native, hybrid, and federated identity models while reducing manual governance effort.
• Identify control gaps and emerging risks involving non-human identities, AI and service accounts, cloud privilege sprawl, and over-entitlement.
• Coordinate IAM roadmaps, tooling strategy, modernization, audit and regulatory responses, remediation plans, reporting, and internal control improvements.

Requirements

• Bachelor’s degree and at least 5 years of relevant work experience, or a minimum of 9 years of combined higher education and/or work experience, including at least 4 years in the relevant cybersecurity or technology area.
• Advanced knowledge of IAM cybersecurity principles and compliance requirements.
• Experience leading cybersecurity functions or teams with limited direction and managing budget responsibilities.
• Ability to partner with Cybersecurity leadership, Technology teams, First Line Risk, Internal Audit, and regulatory stakeholders.
• Ability to work onsite in Buffalo four days per week, with one work-from-home day.

Nice to have

• At least 2 years of managerial experience.
• Experience training and mentoring cybersecurity individual contributors.
• Subject matter expertise in SailPoint, Azure AD/Entra ID, CyberArk, and PAM solutions.
• Experience with cloud identity strategy, IAM roadmapping, tooling strategy, and modernization.

Culture & Benefits

• Full-time employment with a hybrid onsite and work-from-home schedule.
• Work within established cybersecurity, risk appetite, regulatory, and internal control standards.
• Opportunity to influence IAM governance maturity, tooling strategy, and long-term modernization.
• Focus on belonging and conduct that reflects the M&T Bank brand.