Enterprise Risk Director

Overview:

This position is responsible for the management and oversight of the delivery of second line Enterprise Risk Management services in line with area policies, industry standards, and management expectations.  The position is responsible for advising senior leadership and executive leadership as it relates to risk of the businesses or functions supported, and is expected to coordinate information sharing with other risk partners. The position will be responsible for management of activities that help the Bank keep pace with the evolving landscape of the risk management environment and identifying continuous improvements in the  execution of practices within the Risk Management Division. The position may be responsible in positively influencing both internal and external personnel, as applicable. The role is responsible for developing strategy and direction, and be able to do so in context of the bigger picture and in a manner that supports collaboration and efficiency amongst its risk partners, as applicable.  The position requires the ability to function autonomously in the oversight and/or execution of multiple risk activities in support of the services described above and will ensure the development of program level activities.  Activities performed will help the Bank and areas supported adhere to the expectations of the enterprise risk framework and the expectations of key stakeholders, up to and including the Board. The position must remain apprised of changes in the business, as well as to communicate and present emerging risks, changes to the regulatory landscape, and consideration of cost beneficial risk management enhancements for the business.  The individual is considered a subject matter expert in the businesses or functions that they support, and is able to understand other risk elements of the business, as well as the business in context of the Bank overall. 
 

Primary Responsibilities:

• Responsible for management of one or more areas of Enterprise Risk Management such as: Regulatory Affairs or Reporting Center of Excellence.  
• Develop, maintain and implement Corporate risk policies, the overall framework and Enterprise Risk strategy ensuring adequate subject matter expertise and/or data is available. Provides independent oversight and critical challenge of the identification, assessment, monitoring, mitigation, and reporting of all significant risks and risk practices within the First Line of Defense and throughout the Risk division. In risk-based and collaborative manner, ensure underlying elements of the risk management framework accurately reflect the risk environment. Identify gaps or deficiencies, and ensure remediation activities address the risk.  Escalate through the governance structure up to and including senior management / governance committees, as appropriate.  Lead initiatives to analyze various elements of said framework.
• Manage the delivery the completion of high-complexity, ad hoc and appropriately detailed reports, spreadsheets and project work related to multiple risk disciplines based on required frequency (e.g. daily, weekly, monthly or quarterly). Ensure adequate analysis and challenge of existing reporting to identify improvement opportunities.
• Oversee the collection of data and analysis for presentations for/to senior management and governance committees. Present materials/presentations to business partners, senior and executive management, risk committees and the Board.
• Provide leadership to the department over highly complex analysis and judgment based work over multiple disciplines when used to support business decisions. Review the work of others for accuracy and serve as a champion supporting the Bank's goals, Department objectives and risk culture. 
• Serve as primary point of contact and lead in effectively communicating and collaborating with all stakeholders in the Bank including Senior Managers, executive management and the Board, first line risk and other second line risk partners with respect to risk related matters and in a manner in which the Bank manages its risks. Able to readily discuss and address issues or concerns.  Escalate significant and/or unresolved risk-related matters to Department management. Interact with State and Federal Regulatory Agencies, and support organizations such as Internal Audit and Legal.
• Identify program gaps and develop remediation plans to address those gaps in a timely manner. Escalate identified gaps to risk governance committees, executive management and the Board when necessary.  Continuously enhance the Risk Management program elements to improve effectiveness. Oversee the implementation of enhancements to processes.
• Define and lead efforts in the achievement of short and long-term business objectives. May oversee budget, P&L and other business reporting. Analyze variances and report to leadership. Make recommendations on variances and methods to increase efficiency, lower costs, etc. Implement recommendations upon management approval.
• Drive continuous improvement of existing processes and develop new processes/solutions to achieve short and long term business objectives based upon limited information and direction. The need for and pace of change may be dynamic and frequent.
• Lead/oversee the implementation of departmental procedures and other documentation to demonstrate processes. Ensure work is performed accurately, timely and in adherence to corporate risk policies, procedures and key risk related controls. In addition, develop value-added process improvements, resolve risk issues, and enhance reporting and/or information necessary to assess risk. Make enhancements to processes when necessary to ensure independent oversight. Lead and/or support efforts to develop and improve training and materials utilized by the department and/or the Bank.
• Direct participation in specific regulatory inquiries, examinations and ongoing periodic status updates.  Serve a departmental representative in discussions with State and Federal Regulatory Agencies, and Internal Audit. 
• Lead/Participate and/or serve as a committee member, as appropriate, in various risk committees.  Ensure the communication of relevant concerns or positions are taken to appropriate management. Keep abreast of business and market trends that may affect the business/department. Lead industry peer groups, forums, and associations focused on risk management.  
• On a limited basis, serve as the departmental representative when other areas of the Bank request a presentation of the department. 
• Exercise usual authority of a manager concerning staffing, performance appraisals, promotions, salary recommendations, performance management and terminations. Provide guidance and direction with respect to team members career goals. 
• Meet Training requirements assigned by the Bank, Division and Department. Proactively pursue knowledge of new bank initiatives (i.e. Agile project management methodology).  Limited travel may be required for infrequent seminars and conferences. 
• Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance with the Company’s Risk Appetite. Identify risk-related issues needing escalation to management. 
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned

Scope of Responsibilities:

The incumbent will set the strategic direction that drives Enterprise Risk Management activities, as well as, build the necessary Bank-wide partnerships to support the Enterprise Risk division.  In addition, the incumbent will partner with Division leaders, Technology and work alongside business partners to ensure the necessary governance and controls are in place to control and monitor risk. Activities may include:

• Support the CRO and the Bank through oversight of governance and enterprise risk processes.
•  Influencing senior and executive leadership.
•  Escalate to leadership identified risks or identified .
•  Inform Risk Division, senior and executive leadership and the Board of risk management activities through discussion and governance of committees.
•  Monitor Risk Committee activities, such as, ensuring appropriate committee structure, consistent operations and escalation of risks.
•  Management of activities for laws and rules that apply across the enterprise. 
•  Stay abreast of evolving themes in risk, understanding various internal and external factors that may impact the Bank.
•  Management of technology, such as the eGRC system, administrative and reporting processes.
•  Evaluation of the area's management of key processes for the effective and efficient mitigation of risk.  
•  Development of data, analytics and reporting that support the identification, assessment, monitoring, mitigation, and reporting of all significant risks.
•  Development, administration, and monitoring of training and precision leadership activities for the Risk Division.
•  Support the automation of processes.
•  Support risk pillar specific processes as needed.

Managerial/Supervisory Responsibilities:

Manage a team of Risk Managers and Risk Advisors.  May oversee a budget for cost center.

Education and Experience Required:

Bachelor's Degree
12 years experience in risk, reporting and analytics, governance, or other relevant function
OR in lieu of degree,  combined minimum 16 years higher education and/or work experience, including 12 years in risk, reporting and analytics, governance, or other relevant function
Minimum of 7 years managerial or supervisory experience

Education and Experience Preferred:

Master’s degree or MBA
Effectively communicates with all levels of the Bank, including executive management and the Board, via phone, email or in person to obtain information necessary for the completion of reporting, project information and issue resolution. Ability to convey complex and/or nuanced concepts in an effective and understandable manner.
Proficient computer skills (including spreadsheet and word processing software), analytical skills, working knowledge of applicable laws, written and verbal communications w/ all levels.
Ability to design and implement process, control and system changes.
Knowledge of risk analytics and reporting, including the development, implementation and use of all relevant decision technologies, such as eGRC systems.
Interacts with external peers and members of professional organizations to remain aware of changing or emerging risks and proactively bring key information to team for inclusion/consideration in continuous monitoring and/or other oversight activities. 
Demonstrated leadership capabilities. 

Physical Requirements:

None

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $140,621.49 - $234,369.15 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.

Location

Buffalo, New York, United States of America