About Our Team

The Institutional Services & Wealth Management (ISWM) Risk team serves as the First Line of Defense, partnering closely with business leaders to strengthen risk management practices and promote a culture of accountability, transparency, and continuous improvement. Within ISWM Risk, the Risk and Control Management team is responsible for identifying, assessing, monitoring, and mitigating risk through the evaluation of control design and operating effectiveness. Our team plays a critical role in maintaining a strong and sustainable control environment that enables business growth, supports strategic objectives, and ensures compliance with regulatory expectations and enterprise risk management standards.

Role Overview

The Control Testing Analyst is a key contributor within the ISWM Risk & Control Management team and is responsible for executing a risk-based control testing program that evaluates the design and operating effectiveness of controls across Institutional Services and Wealth Management (ISWM). Reporting to the ISWM Control Testing Lead, this role partners closely with control/ process owners to assess control effectiveness, identify control gaps, and strengthen the overall risk and control environment.

The ideal candidate possesses hands-on experience in control testing, control design assessments, operating effectiveness testing, Risk and Control Self-Assessments (RCSA), and issue management. This individual must be highly organized, detail-oriented, and capable of independently managing multiple testing engagements while effectively communicating results and recommendations to stakeholders.

Primary Responsibilities:     

Control Testing Execution

• Plan, execute, and report on the business unit’s risk-based testing program in alignment with established policies, standards, and methodologies.
• Conduct end-to-end process and control walkthroughs with process and control owners to gain an in-depth understanding of business processes, risks, and control activities.
• Develop testing plans, detailed scripts, and test cases that effectively assess control design and operating effectiveness.
• Request testing populations and select samples in accordance with established sampling methodologies and testing standards.
• Perform comprehensive control design effectiveness assessments and accurately complete required documentation and assessment templates.
• Execute control testing with a high degree of accuracy, completeness, and timeliness while maintaining adherence to established methodology.
• Provide oversight and direction for team testing activities, ensuring timely, consistent, and comprehensive execution in accordance with established quality standards, testing methodologies, documentation requirements, and regulatory expectations.
• Implement and maintain a strong quality review and challenge process to validate testing accuracy, completeness, and adherence to methodology.
• Complete control operating effectiveness assessments and supporting documentation in accordance with enterprise standards.
• Document testing results within Archer and maintain supporting evidence, including screenshots and testing artifacts, in designated SharePoint repositories.
• Evaluate control design and operating effectiveness, assess identified risks, and validate risk mitigation activities in accordance with M&T's Risk and Control Policy, procedures, and standards.

Findings, Reporting, and Stakeholder Engagement

• Communicate observations and findings clearly to management and stakeholders.
• Socialize testing results with process and control owners, facilitate discussions regarding observations and conclusions, and obtain appropriate approvals.
• Assist in drafting findings and action plans that address identified control weaknesses and enhance the overall control environment.
• Proactively monitor assigned book of work for changing risks, timely execution, and required management updates.
• Support ad hoc projects and initiatives aimed at enhancing the maturity of the control environment across ISWM.
• Provide status updates and reporting to management regarding assigned testing engagements and portfolio progress.

Experience Required:

• Bachelor’s degree and a minimum of 2 years' relevant work experience, or in lieu of a degree, a combined minimum of 6 years' higher education and/or work experience, including a minimum of 2 years' relevant work experience
• Strong understanding of control testing methodologies, including control design and operating effectiveness testing.

Desired Experience:

• Experience within banking, wealth management, institutional services, financial services, audit, compliance, risk management, or operational risk functions.
• Experience using Archer or other Governance, Risk, and Compliance (GRC) platforms.
• Ability to adapt to change and perform effectively in a fast-paced environment.
• High proficiency in Excel, PowerPoint, and the Microsoft Office Suite.
• Experience collaborating with cross-functional stakeholders and providing guidance on risk and control matters.
• Exceptional interpersonal, presentation, and communication skills, with a demonstrated ability to build strong relationships and influence outcomes.
• Strong analytical, critical thinking, and problem-solving skills with exceptional attention to detail.
• Ability to independently manage multiple priorities while meeting deadlines and quality expectations.
• Ability to work effectively within a team-oriented environment where success is measured collectively.
• Ability to work effectively as part of a team-oriented environment, where success is measured collectively.

Why Join Us?

This is an exciting opportunity to be part of transformational journey within ISWM Risk. Our team is growing, and driving meaningful change and delivering measurable value to the organization.

Location