Encryption Engineering Manager

This role offers a hybrid work schedule; offering the flexibility to work from home two days a week, while providing the opportunity for in-person collaboration. 

At M&T Tech, we’re a team of makers, doers, and builders, working to create the most advanced technology solutions in banking.  We’re not your stereotypical suit and tie bankers: we’re an innovative team of leading tech experts, pushing boundaries, and taking risks.  We’re building an agile team of the most skilled and creative workers to solve complex problems, architect solutions, write high-performance software, and chart our new path, all to make the lives of our customers, and the communities that we serve, better.  Join us and be part of something new as we build tomorrow’s bank, todayOverview:   

Manages the activities and strategic priorities of one or multiple cybersecurity teams. Responsible for financial and human capital planning to ensure short- and long-term priorities support and protect the Bank from internal and external cybersecurity threats.

Primary Responsibilities:

• Lead strategic planning for cyber initiatives within function(s) of oversight, ensuring alignment of cybersecurity objectives with business goals.

• Prioritize work within function(s) of oversight and raise to senior leadership and finance to incorporate into financial plan.

• Develop risk mitigation strategies, controls, and frameworks in partnership with technology risk to manage identified risks effectively.

• Manage initiatives to identify and implement new/updated methodologies that ensure a proactive stance against risks.

• Partner with incident response teams to ensure that plans are regularly reviewed, updated, and tested to align with emerging threats and best practices.

• Oversee technology and systems and influence senior leadership to select appropriate system; lead designing of system and architecture once system is selected.

• Interpret regulatory and compliance requirements, and partner with risk, legal, and engineering teams to ensure necessary controls are implemented.

• May present in regulatory engagements to understand and address cybersecurity-related legal and regulatory requirements.

• Create strong workforce plan to meet business needs, including (but not limited to) mentoring and coaching high potential team members, developing career paths and succession planning for key roles, identifying training needs and gaps, and establishing culture of knowledge sharing and collaboration.

• Contribute to the delivery of the Bank-wide information security training and awareness program.

• Collaborate with technology and business leaders to create program that meets Cybersecurity objectives and organization needs.

• Exercise usual authority of a manager concerning staffing, performance appraisals, promotions, salary recommendations, performance management and terminations.

• Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues needing escalation to management.

• Promote an environment that supports diversity and reflects the M&T Bank brand.

• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.

• Complete other related duties as assigned.

Scope of Responsibilities:

• Primary partners: CISO, Cybersecurity Directors and Senior Managers

• Stakeholders: Technology team and the Bank

• Work is accomplished with minimal direction; strategizes team goals based on Cybersecurity imperatives.

• Oversees a minimum of 2 functions/teams within Cybersecurity.

• This role may present to Regulators.

• Accountable for informing and meeting budget for functions/teams they oversee.

• This role manages one or more functions/teams/departments within Cybersecurity:

  • Operations and Threat – proactively identify, analyze, and respond to cyber threats, ensuring the Bank's digital assets are secure and resilient against potential risks and attacks. Functions/teams may include security operations center, governance & oversight, insider threat, data loss prevention, threat intel & hunt, incident response, detection & protection engineering

  • Cloud and Architecture – design, implement, and man