Enterprise Risk Advisor - Strategic & Reputational Risk

Overview:

This position is responsible for the development and delivery of second line Enterprise Risk Management services in line with area policies, industry standards, and management expectations with respect to strategic and reputational risks.  The position is responsible for advising line management, senior leadership and executive leadership as it relates to risk of the businesses or functions supported, and is expected to coordinate information sharing with other risk partners.  The position will be responsible for leading development and delivery of activities that help the Bank keep pace with the evolving landscape of the risk management environment and identifying continuous improvements in the  execution of practices within the Risk Management Division and its oversight of strategic and reputational risks.  The position requires the ability to function autonomously in the oversight and/or execution of one or more activities in support of the services described above and will play a key role with supporting the development of program level activities.  Activities performed will help the Bank and areas supported adhere to the expectations of the enterprise risk framework and the expectations of key stakeholders, up to and including the Board. The individual is considered a subject matter expert in the businesses or functions that they support.   

Primary Responsibilities:

• Lead and may be responsible for one or more Enterprise Risk Management activities within a similar area or will manage activities that span across the Bank.
• Ensure adherence to enterprise risk related policies and procedures.  Understand and utilize the Risk Management Framework, and develop and implement various elements of said framework. Provides independent oversight and critical challenge of the identification, assessment, monitoring, mitigation, and reporting of all significant risks and risk practices within the First Line of Defense and throughout the Risk division. In risk-based and collaborative manner, ensure underlying elements of the risk management framework accurately reflect the risk environment. Identify gaps or deficiencies, and ensure remediation activities address the risk.  Escalate through the governance structure up to and including senior management / governance committees, as appropriate.  Participate in initiatives to analyze various elements of said framework.
• Produce complex and ad hoc reports, spreadsheets and project work related to various risk disciplines based on required frequency (e.g. daily, weekly, monthly or quarterly). Periodically analyze existing reporting to identify improvement opportunities.
• Collect and/or analyze of data necessary for presentations for/to senior management and governance committees. Prepare and present materials/presentations to business partners, senior and executive management. May assist with materials provided to various risk committees.
• Perform highly complex analysis and judgment based work over a standard discipline or a range of disciplines to support business decisions. Review the work of others for accuracy. 
• Serve as liaison and trusted partner of the business with well-established relationships. May serve as a primary point of contact for specific activities and supporting business lines. Work collaboratively with Senior Managers within the Risk Division and Bank, first line risk and other second line risk partners to ensure two-way communication on issues and concerns.  Identify and escalate significant and/or unresolved risk-related matters to Department management. May interact with State and Federal Regulatory Agencies, Executive Management, and support organizations such as Internal Audit and Legal.
• Assist in identification of program gaps and develop remediation plans to address those gaps in a timely manner. Escalate identified gaps to risk governance committees and executive management as necessary.  Continuously enhance the Enterprise Risk Management program elements to improve effectiveness. Assist with the implementation of enhancements to processes.
• Lead continuous improvement of existing processes and develop new processes, as well as, the planning and implementation of new projects, programs, and plans to achieve short and long term business objectives.
• Draft/Document or review departmental procedures and other documentation to demonstrate processes. In addition, develop value-added process improvements, resolve risk issues, and enhance reporting and/or information necessary to assess risk. Lead and/or support efforts to develop and improve training and materials utilized by the department and/or the Bank.
• Indirect participation in specific regulatory inquiries, examinations and ongoing periodic status updates. Serve as a departmental representative in discussions with Internal Audit. 
• Participate in various risk committees and other meetings.  Ensure the communication of relevant concerns or positions are taken to appropriate management. 
• Act as lead for departmental system support, coordinating with internal business partners, vendors and technology to address issues for the department. 
• Provide guidance and direction to others regarding various matters. Perform reviews of the work of others to ensure it was accurately prepared and appropriate for the intended audience.
• Meet training requirements assigned by the Bank, Division and Department through self-management of appropriate, applicable, cost-effective training opportunities. Proactively pursue knowledge of new bank initiatives (i.e. Agile project management methodology).  Limited travel may be required for infrequent seminars and conferences.
• Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance with the Company’s Risk Appetite. Identify risk-related issues needing escalation to management. 
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned

Scope of Responsibilities:

The incumbent will be responsible for Enterprise Risk Management activities as assigned, as well as, build the necessary Bank-wide partnerships to support the enterprise risk division.  In addition, the incumbent will partner with Risk Division leaders, Technology and work alongside business partners to ensure the necessary governance and controls are in place to control and monitor risk. Activities may include:

•  Support the CRO and the Bank through the management of governance and enterprise risk processes.
•  Support activities for laws and rules that apply across the enterprise. 
•  Stay abreast of evolving themes in risk, understanding various internal and external factors that may impact the Bank.
•  Analyze information to identify risks and trending.
•  Support technology, such as the eGRC system, administrative and reporting processes.
•  Independently evaluate the area's management of key processes for the effective and efficient mitigation of risk.  
•  Provides data, analytics and reporting that support the identification, assessment, monitoring, mitigation, and reporting of all significant risks.
•  Develop, administer, and monitor training and precision leadership activities for the Risk Division.
•  Support the automation of processes.
•  Support risk pillar specific processes as needed.

Managerial/Supervisory Responsibilities:

No direct management but may provide guidance to junior specialists. May serve in a mentoring capacity.

Education and Experience Required:

Bachelor's Degree
8 years experience in risk, reporting and analytics, governance, or other relevant function OR in lieu of degree, combined minimum of 12 years higher education and/or work experience, including 8 years in risk, reporting and analytics, governance, or other relevant function

Education and Experience Preferred:

Master’s degree or MBA
Effectively communicates with others throughout the Bank, including senior management, via phone, email or in person to obtain information necessary for the completion of reporting, project information and issue resolution.
Proficient computer skills (including spreadsheet and word processing software), analytical skills, expert knowledge of applicable laws, written and verbal communications w/ all levels.
Ability to design and implement process, control and system changes.
Knowledge of risk analytics and reporting, including the development, implementation and use of all relevant decision technologies, such as eGRC systems.
Interacts with external peers and members of professional organizations to remain aware of changing or emerging risks and proactively bring key information to team for inclusion/consideration in continuous monitoring and/or other oversight activities.