Cyber/IT Policy & Standards Technical Writing - Senior Analyst

View full description

Requirements:

• Bachelor’s degree and a minimum of 5 years’ relevant work experience, or in lieu of a degree, a combined minimum of 7 years’ higher education and/or work experience, including a minimum of 5 year relevant work experience
• Strong knowledge of Cybersecurity principles, frameworks (e.g., NIST CSF, CRI Profile), and regulations (23 NYCRR 500, GLBA/Interagency Guidelines, FFIEC)
• Experience conducting research and evaluating information for reliability, validity, objectivity and relevance
• Strong ability communicating complex information, concepts or ideas in a confident and well-organized manner through verbal, written and/or visual means
• Strong knowledge of established risk management processes (e.g., methods for assessing and mitigating risk) and the ability to apply the concepts

Responsibilities:

• Research, recommend, and develop new Cybersecurity and Technology policies and standards content based on legal and regulatory requirements and industry best practices.
• Update and enhance existing Cybersecurity policies and standards as needed
• Enforce Cybersecurity policies, standards and other governance; Promote awareness through daily activities and participation in governance committees.
• Maintain current knowledge of the Bank's Cybersecurity and Technology policies, standards and procedures as well as industry best practices and proposed new guidelines and regulations.
• Identify and evaluate Cybersecurity risk to the business; Develop risk mitigation strategies, as appropriate.
• Execute Cybersecurity Risk Management Program in accordance with Bank policies and procedures. Analyze results and prepare recommendations to address identified risk and/or enhance the overall program. Represent Cybersecurity in risk management discussions and consultations across the Bank.
• Provide current data for performance metrics and reporting.
• Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance with the Company’s Risk Appetite. Identify risk-related issues needing escalation to management.
• Promote an environment that supports diversity and reflects the M&T Bank brand.
• Complete other related duties as assigned.