Senior First Line Risk Specialist – Technology (Cybersecurity)

Location: Bridgeport, Connecticut, United States; four days onsite and one day working from home per week.

Salary: $150,800–$251,300 USD annually

Company

M&T Bank is a banking and financial services organization operating in a highly regulated environment.

What you will do

• Lead complex technology and cybersecurity risk assessments, control reviews, RCSAs, process evaluations, and audit support activities.
• Develop and execute risk management frameworks aligned with business objectives, internal control standards, and regulatory requirements.
• Partner with Technology, Cybersecurity, Risk Management, Internal Audit, Regulatory Affairs, and business stakeholders to evaluate risk exposure and drive remediation.
• Coordinate regulatory examinations, internal audits, and external reviews, including documentation requests, exam materials, responses, and follow-up actions.
• Improve risk and control evaluation methodologies and provide guidance on governance, audit readiness, regulatory expectations, and industry practices.
• Mentor analysts and risk professionals and contribute to training on technology risk, cybersecurity risk, controls, governance, and audit readiness.

Requirements

• Bachelor's degree and at least 7 years of relevant experience, or 11 years of combined higher education and work experience without a degree.
• At least 6 years of relevant experience in Technology, Audit, Cybersecurity risk, or a related business area.
• Expert knowledge of technology, cybersecurity, audit, and risk principles.
• Strong understanding of audit practices, internal controls, risk assessment methodologies, and regulatory expectations.
• Excellent communication, stakeholder management, executive presentation, judgment, and independent workstream leadership skills.
• Ability to work four days onsite in Bridgeport, Connecticut, with one remote day per week.

Nice to have

• Master's degree in Information Technology, Computer Science, Cybersecurity, Business Administration, Accounting, Finance, Law, or a related field.
• Experience in banking, financial services, fintech, money movement, or another highly regulated industry.
• Professional certification such as CISA, CRISC, CISM, or CISSP.
• Experience advising senior leadership, influencing stakeholders, building consensus, and mentoring peers.

Culture & Benefits

• Hybrid work arrangement with one work-from-home day per week.
• Work closely with senior leaders across Technology, Cybersecurity Risk, Risk, Internal Audit, and Regulatory Affairs.
• Opportunity to present to regulators under the direction of senior Technology and Cybersecurity Risk leaders.
• Focus on belonging, risk accountability, timely remediation, and adherence to internal control standards.