Overview: Manages the activities and strategic priorities of the Protection Engineering and Encryption Engineering Programs within Cybersecurity Infrastructure Engineering. Responsible for financial and human capital planning to ensure short- and long-term strategic efforts support and protect the Bank from internal and external cybersecurity threats. Primary

Responsibilities

Drive the development and execution of comprehensive cybersecurity strategies for Web Application Firewall, Intrusion Prevention, and Encryption controls, ensuring alignment with overall cybersecurity vision and organizational needs. Partner with Cyber senior leadership and Finance to direct business and financial resources effectively based on risk assessments and strategic priorities. Monitor and review the effectiveness of risk measurement strategy, update assessments, and procedures in partnership with technology risk and enterprise risk teams and communicate risk status to senior management. Lead strategic initiatives across Cybersecurity that drive automation, continuous improvement, and operational efficiencies, while maintaining or improving overall outcomes. Establish and maintain incident response policies and procedures, ensuring they align with industry best practices and regulatory requirements. Collaborate with engineering and architecture teams to select appropriate security technologies that align with overall technology roadmap and cybersecurity goals. Leverage industry knowledge and expertise to inform best practices and policies, ensuring continued compliance with applicable laws and regulations. May represent organization in industry forums and regulatory engagements to understand and address cybersecurity-related legal and regulatory requirements. Create strong workforce plan to meet business needs, including (but not limited to) mentoring and coaching high potential team members, developing career paths and succession planning for key roles, identifying training needs and gaps, and establishing culture of knowledge sharing and collaboration. Guide creation and maintenance of internal Cybersecurity training needs to deliver security awareness and training programs across the Bank. Develop Cybersecurity strategy and programs that strategically meets the needs and addresses the challenges of the organization. Partner with procurement and vendor management teams to assess vendor security controls, conduct due diligence, and negotiate appropriate security provisions in contracts. Exercise usual authority of a manager concerning staffing, performance appraisals, promotions, salary recommendations, performance management, and terminations. Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues needing escalation to management. Promote an environment that supports belonging and reflects the M&T Bank brand. Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable. Complete other related duties as assigned. Scope of

Responsibilities

This role manages the following functions/teams within the Cybersecurity department: Protection Engineering, consisting of Web Application Firewall Engineers and Intrusion Prevention System Engineers and Encryption Engineering, consisting of an Encryption Manager and the Encryption Engineers that report to the Encryption Manager Primary partners: CISO, CIO, Technology Directors, Cybersecurity Operations organization, Cybersecurity Infrastructure Engineering organization. Stakeholders: Regulators, Technology team, and the Bank. Work is accomplished with minimal direction; strategizes team imperatives in alignment with Bank imperatives. This role may act as a lead Cybersecurity representative with Regulators. Accountable for developing and executing budget for functions/teams they oversee. Manager Responsibility: Typically leads a team of 25 or more FTEs (directly leading managers, and indirectly individual contributors)

Education

and

Experience

Required: Bachelor's degree and a minimum of 9 years’ relevant work experience, or in lieu of a degree, a combined minimum of 13 years’ higher education and/or work experience. Demonstrated expert knowledge of Cybersecurity principles. Minimum of 8 years’ work experience in/with the specific cybersecurity function. Minimum 3 years’ managerial experience Expertise in Web Application Firewall and Intrusion Prevention System policy strategy and automation. Expertise in SSL Certificate management, cipher management, and both symmetric and asymmetric encryption technologies and best practices. Expertise in software engineering methodologies and general-purpose automation platforms

Education

and

Experience

Preferred: Eligibility to obtain a Top Secret/Sensitive Compartmented Information (TS/SCI) US Government Security Clearance. Minimum of 5 years’ managerial experience. Proven ability to mentor and lead cybersecurity people leaders and teams of people. Excellent communication skills. Excellent interpersonal skills. Proven ability to effectively convey message to technical and business leaders.

Experience

effectively influencing senior leaders. Proven experience strategically prioritizing across competing priorities and quickly changing landscape.

Experience

in a highly regulated industry environment, including building and maintaining effective relationships with external stakeholders. Advanced understanding of financial services regulations, compliance requirements, and risk management practices.

Experience

translating a strategic business objective into strategic cyber plans, programs, and initiatives. Expertise in Security Information and Event Management technologies and best practices. Expertise in cybersecurity innovation and emerging technologies. . #LI-JB3 #Hybrid M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $167,600.00 - $279,400.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation. Location Buffalo, New York, United States of America Great companies have an enduring sense of purpose. At M&T, our purpose is a simple one: make a difference in people’s lives and uplift the communities we serve. M&T Bank Corporation is a financial holding company headquartered in Buffalo, New York. M&T’s affiliates offer advice, guidance, expertise and solutions across the entire financial spectrum, combining M&T Bank’s traditional banking services with the wealth management and institutional capabilities offered by Wilmington Trust. M&T Bank has a network of over 1,000 branches and 2,200 ATMs that span 12 states from Maine to Virginia and Washington, D.C. For more than 165 years, M&T has strived to take an active role in our communities and build long-lasting relationships with our customers. We are a bank for communities—combining the capabilities of a large bank with the care of a locally focused institution. As an employer of choice, we are proud to offer competitive benefits ranging from medical and retirement to forty hours of paid volunteer time, each year. Our core values – integrity, ownership, collaboration, curiosity, and candor – drive the work we do. We seek to further build upon our record of success by bringing in top talent and fresh skill sets while continuing to support the growth and development of all our team members. View M&T’s Human Capital Report to learn more. Ready to join our team? Submit your application today! If you are unable to apply through this site due to technical issues or need an accommodation to apply, please contact us at careersitesupport@mtb.com for assistance. M&T Bank is unwavering when it comes to providing equal employment opportunities to all employees and applicants without regard to race, color, national origin, religion, ethnicity, sex, gender identity, age, disability, citizenship, pregnancy, veteran status, military status, marital status, sexual orientation, genetic information or any other characteristic protected under applicable federal, state or local laws. M&T Bank Corporation has policies and procedures in place to promote a drug free workplace. Career Site Privacy Notice