Overview:  

The Business Risk Team Lead will play a critical role in strengthening the control environment across Institutional Services by partnering directly with business leaders to identify risks, enhance processes, and design sustainable controls. This role is responsible for leading risk assessments, facilitating RCSA activities, reviewing business processes and workflows, and translating process risks into practical, measurable, and testable control solutions.

The ideal candidate brings a strong foundation in operational risk management, internal audit, or consulting, with demonstrated experience performing process analysis, risk identification, control design, and control gap assessments as a core component of their day-to-day responsibilities.

Primary Responsibilities:    

• Partner with business leaders, process owners, and subject matter experts to evaluate business processes, identify risks, and design effective controls that support the Bank's risk management objectives and regulatory requirements

• Lead and facilitate risk identification, risk assessment, RCSA, and control design activities across multiple business functions, driving consensus among stakeholders and influencing meaningful process improvements

• Conduct detailed process analysis and process mapping reviews to identify operational, compliance, and fiduciary risks, and recommend practical mitigation strategies

• Review and challenge process documentation, procedures, control inventories, and control language to ensure controls are appropriately designed, clearly articulated, sustainable, and capable of demonstrating effectiveness

• Perform control gap analyses to identify weaknesses, redundancies, and opportunities to strengthen the control environment, including recommending preventive, detective, automated, and monitoring controls as appropriate

• Translate complex business processes and associated risks into actionable, measurable, and testable control designs that align with internal standards and industry best practices

• Provide credible challenge and risk-based feedback to business partners while building strong working relationships that facilitate change and continuous improvement

• Identify opportunities to leverage data analytics, reporting, workflow automation, and technology solutions to improve risk management capabilities, control effectiveness, and operational efficiency

• Support the development and execution of risk assessments, scenario analyses, control rationalization efforts, and remediation activities related to identified control weaknesses or process gaps

• Maintain deep knowledge of Institutional Services products, services, business processes, and relevant regulatory and compliance requirements to effectively assess risk and provide strategic guidance

• Lead multiple initiatives simultaneously, balancing competing priorities, managing stakeholder expectations, and communicating progress, risks, dependencies, and recommendations to management

• Mentor and develop junior team members by providing guidance on risk identification, process analysis, control design methodologies, and risk management best practices

• Promote an environment that supports belonging and reflects the M&T Bank brand.

• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.

• Complete other related duties as assigned.

Ideal Candidate Profile:
The ideal candidate will have the following experience:

• Process analysis and process mapping

• Risk identification and risk assessment

• Control design and control gap analysis

• Risk and Control Self-Assessments (RCSA)

• Designing preventive, detective, and monitoring controls

• Translating process risks into practical, testable controls

• Facilitating workshops and working sessions with process owners and business leaders

• Driving process improvement and risk reduction initiatives

Supervisory/ Managerial Responsibilities:
N/A
 

Education and Experience Required:

Bachelor’s degree and a minimum of 5 years' relevant work experience, or in lieu of a degree, a combined minimum of 9 years' higher education and/or work experience, including a minimum of 5 years' relevant work experience

Preferred Background:

• Bachelor’s degree in quantitative/analytical discipline (e.g., Finance, Accounting or Economics)

• 7+ years of experience in Operational Risk Management, Internal Audit, Risk Consulting, Business Controls or related disciplines

• Strongly preferred background in one of the following:

• Internal Audit

• Risk Advisory / Risk Consulting

• Public Accounting Advisory Practices

• Operational Risk Programs

• Process Improvement and Control Transformation Initiatives

• Demonstrated experience leading or directly executing:

• Process mapping engagements

• Risk assessments and RCSAs

• Control design and redesign efforts

• Control rationalization and optimization programs

• Regulatory remediation or risk transformation initiatives

Location: