Lead IAM Governance Specialist (Cybersecurity)

Location: Wilmington, Delaware, United States; four days onsite at the Wilmington Tech Hub with the flexibility to work from home one day per week.

Salary: $128,100–$213,500 USD annually.

Company

M&T Bank is a financial institution focused on secure, compliant banking operations and technology.

What you will do

• Lead IAM governance across SailPoint, Azure AD / Entra ID, CyberArk, and PAM platforms.
• Define governance for birthright access, role models, entitlement management, access certifications, RBAC, conditional access, and privileged roles.
• Establish scalable guardrails for cloud-native, hybrid, and federated identity models.
• Advise on complex access decisions, risk exceptions, enterprise initiatives, and emerging risks involving non-human identities, AI and service accounts, and cloud privilege sprawl.
• Identify control gaps, create remediation plans, and improve governance documentation, reporting, metrics, and internal controls.
• Partner with Cybersecurity, First Line Risk, Internal Audit, leadership, and external auditors on policies, regulatory requests, roadmaps, and modernization projects.

Requirements

• Bachelor’s degree and at least 5 years of relevant work experience, or an equivalent combination of education and experience meeting the stated requirements.
• At least 4 years of experience in the relevant Cybersecurity or Technology area when qualifying through the equivalent education and experience pathway.
• Advanced knowledge of IAM cybersecurity principles and compliance requirements.
• Ability to work with limited direction and exercise significant judgment as an IAM cybersecurity subject matter expert.
• Ability to work onsite in Wilmington, Delaware four days per week.

Nice to have

• Subject matter expertise in SailPoint, Azure AD / Entra ID, CyberArk, and PAM solutions.
• Experience with cloud identity strategy, RBAC, conditional access, and privileged role governance.
• Experience with IAM roadmapping, tooling strategy, and modernization.

Culture & Benefits

• Hybrid schedule with one work-from-home day per week.
• Work aligned with enterprise risk, regulatory, and internal control standards.
• Collaboration with Cybersecurity, Risk, Internal Audit, leadership, and external auditors.
• Opportunity to contribute to long-term IAM modernization and governance maturity.