Overview: Guide the risk analysis and control development process that supports Commercial Banking technology and Enterprise Architecture. Provide direction for risk identification and mitigation and serve as a key advisor as the Bank expands into digital asset products, including Wallet‑as‑a‑Service (WaaS), Bitcoin‑related offerings, and blockchain‑enabled capabilities. This role requires deep technical understanding of digital assets to assess emerging risks. The individual must bring strong experience in technology architecture development, process mapping, audit practices, and control design, using these skills to proactively identify risks and implement controls. Collaborates with cross‑functional risk, technology, cybersecurity, and business teams to enhance risk policies and contribute to organizational resilience. Primary

Responsibilities

Create, maintain, and analyze detailed process maps to identify points of correction, operational inefficiencies, and potential risks across digital‑asset workflows and Commercial Banking processes; translate findings into actionable controls and enhancements. Apply audit‑driven methodologies to evaluate Commercial Banking processes, ensuring adherence to regulatory expectations, internal standards, and industry best practices, especially in the digital‑asset domain. Serve as a subject‑matter expert with a Technology and Cybersecurity risk view on digital assets, including blockchain fundamentals, cryptocurrency custody models, wallets‑as‑a‑service, and transaction flows. Provide deep technical insight to guide safe product design and launch. Formulate and implement risk management plans, including reporting and documentation such as writing standards, reviewing non‑compliance, creating targeted risk assessments, leading risk and control self‑assessments, and summarizing findings for senior leadership. Lead compliance efforts for the Commercial Banking function, ensuring adherence to industry regulations and internal standards, particularly as they relate to digital‑asset products and blockchain‑based services. Act as a proactive first‑line risk owner, independently identifying emerging risks, control weaknesses, and areas requiring improvement across associated with Technology and Cybersecurity risk within Commercial Banking Technology’s digital‑asset initiatives and Enterprise Architecture, without waiting for issues to be escalated by second‑ or third‑line functions. Partner strategically with cross‑functional teams and senior leadership to ensure swift and effective action when events occur that are beyond or potentially beyond the Bank’s risk appetite, especially in the rapidly evolving digital‑asset landscape. Assist with preparation and response to regulatory engagements, including preparing materials, coordinating responses, and supporting exam management (template folders, first‑day letters, follow‑up requests). Assess implications of new methodologies and technologies, recommending ways for Technology and Cybersecurity Risk leadership to innovate risk management strategies while maintaining a proactive stance against emerging threats in digital‑asset products. Mentor newer analysts, fostering their professional growth and ensuring a high standard for all risk analysts within the team. Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Identify risk‑related issues requiring escalation. Promote an environment that supports belonging and reflects the M&T Bank brand. Maintain internal control standards, including timely remediation of audit points and regulatory issues. Complete other related duties as assigned Scope of

Responsibilities

This position will interact primarily with individual contributors and people leaders within the Technology and Cybersecurity teams. It will have occasional to frequent interaction with senior leaders of Technology, Cybersecurity, the Risk Division and Internal Audit. Work is accomplished with limited direction, and the incumbent exercises judgement in selecting methods, techniques, and evaluation criteria in obtaining results. It exerts significant latitude in determining objective of assignment. This role will prepare materials for Regulators under the direction of senior Technology and Cybersecurity Risk leaders.

Education

and

Experience

Required: Bachelor's degree and a minimum of 5 years’ relevant work experience, or in lieu of a degree, a combined minimum of 9 years’ higher education and/or work experience Demonstrated advanced knowledge of Technology and Cybersecurity risk principles Minimum of 4 years' relevant work experience in or with the specific Technology and/ or Cybersecurity risk area and/or business unit

Education

and

Experience

Preferred: Applicable certification align to function or domain such as Certified in Risk and Information Systems Control (CRISC®), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) Proficient level of critical thinking and able to lead problem solving Excellent communication and interpersonal skills

Experience

partnering with leadership to design solutions Excellent ability to strategically seek critical information, and apply to specific processes Prior experience prioritizing across competing priorities and quickly changing landscape, and deliver results aligned with priorities Proficient persuasive communication skills to gain buy-in of others M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $103,000.00 - $171,600.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation. The range listed above corresponds to our national pay range for this role. The specific pay range applicable to you may vary based on your location. Location Clanton, Alabama, United States of America Great companies have an enduring sense of purpose. At M&T, our purpose is a simple one: make a difference in people’s lives and uplift the communities we serve. M&T Bank Corporation is a financial holding company headquartered in Buffalo, New York. M&T’s affiliates offer advice, guidance, expertise and solutions across the entire financial spectrum, combining M&T Bank’s traditional banking services with the wealth management and institutional capabilities offered by Wilmington Trust. M&T Bank has a network of over 1,000 branches and 2,200 ATMs that span 12 states from Maine to Virginia and Washington, D.C. For more than 165 years, M&T has strived to take an active role in our communities and build long-lasting relationships with our customers. We are a bank for communities—combining the capabilities of a large bank with the care of a locally focused institution. As an employer of choice, we are proud to offer competitive benefits ranging from medical and retirement to forty hours of paid volunteer time, each year. Our core values – integrity, ownership, collaboration, curiosity, and candor – drive the work we do. We seek to further build upon our record of success by bringing in top talent and fresh skill sets while continuing to support the growth and development of all our team members. View M&T’s Human Capital Report to learn more. Ready to join our team? Submit your application today! If you are unable to apply through this site due to technical issues or need an accommodation to apply, please contact us at careersitesupport@mtb.com for assistance. M&T Bank is unwavering when it comes to providing equal employment opportunities to all employees and applicants without regard to race, color, national origin, religion, ethnicity, sex, gender identity, age, disability, citizenship, pregnancy, veteran status, military status, marital status, sexual orientation, genetic information or any other characteristic protected under applicable federal, state or local laws. M&T Bank Corporation has policies and procedures in place to promote a drug free workplace. Career Site Privacy Notice