1

Senior Technology Risk Management Jobs in Buffalo, NY

Serve as the primary technology partner to senior business executives, providing strategic guidance ... Ensure technology solutions support regulatory expectations, policy requirements, risk management ...

Serve as the primary technology partner to senior business executives, providing strategic guidance ... Ensure technology solutions support regulatory expectations, policy requirements, risk management ...

... technology risk management. Proficient understanding of technology operations and related risks and ... It is expected that a Senior Audit Manager is independent and proactive in addressing this ...

next page

Showing results 1-20

Senior Technology Risk Management information

See Buffalo, NY salary details

$21.8K

$114.6K

$203.4K

How much do senior technology risk management jobs pay per year?

As of Aug 14, 2026, the average yearly pay for senior technology risk management in Buffalo, NY is $114,553.00, according to ZipRecruiter salary data. Most workers in this role earn between $81,900.00 and $140,500.00 per year, depending on experience, location, and employer.

How does a senior technology risk management professional typically collaborate with other departments within an organization?

A Senior Technology Risk Management professional regularly works with teams across IT, compliance, internal audit, and business units to identify, assess, and mitigate technology-related risks. This collaboration often involves participating in cross-functional meetings, providing guidance on risk controls, and ensuring that technology initiatives align with the overall risk appetite of the organization. Strong communication skills are essential, as the role requires translating complex technical risks into actionable recommendations for non-technical stakeholders. Building solid relationships with various departments is crucial to effectively manage and respond to emerging risks.

What are the key skills and qualifications needed to thrive as a senior technology risk management professional?

To thrive as a Senior Technology Risk Management professional, you need a deep understanding of IT risk frameworks, cybersecurity principles, and regulatory requirements, often supported by a degree in information security or related fields and certifications like CISA, CISSP, or CRISC. Familiarity with risk assessment tools, GRC (Governance, Risk, and Compliance) platforms, and incident management systems is typically required. Strong analytical thinking, communication skills, and stakeholder management abilities help professionals excel in this role. These skills and qualities are vital for effectively identifying, assessing, and mitigating technology risks to protect organizational assets and ensure regulatory compliance.

What is the difference between Senior Technology Risk Management vs Cybersecurity Analyst?

AspectSenior Technology Risk ManagementCybersecurity Analyst
Required CredentialsCertifications like CRISC, CISSP, CISACertifications like CompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, policy development, strategic planningMonitoring security systems, incident response, vulnerability assessment
Employer & Industry UsageFinancial, healthcare, large enterprisesIT firms, government agencies, tech companies

While both roles focus on security, Senior Technology Risk Management emphasizes strategic risk assessment and mitigation planning, whereas Cybersecurity Analysts focus on technical security operations and incident response. The roles often collaborate but differ in scope and daily responsibilities.

What does a senior technology risk management do?

A senior technology risk management professional oversees the identification, assessment, and mitigation of technology-related risks within an organization. They develop strategies to protect information systems, ensure compliance with security standards, and often use tools like risk assessment frameworks and security audits to manage vulnerabilities effectively.

What is senior technology risk management?

Senior Technology Risk Management refers to a leadership role responsible for identifying, assessing, and mitigating technology-related risks within an organization. Professionals in this position develop risk management strategies, ensure compliance with regulations, and oversee the implementation of security controls to protect information systems. They collaborate with IT, business, and compliance teams to address vulnerabilities and respond to emerging threats. Their work helps safeguard critical assets and supports the organization's overall risk management framework.

What are popular job titles related to Senior Technology Risk Management jobs in Buffalo, NY?

For Senior Technology Risk Management jobs in Buffalo, NY, the most frequently searched job titles are:

What job categories do people searching Senior Technology Risk Management jobs in Buffalo, NY look for?

The top searched job categories for Senior Technology Risk Management jobs in Buffalo, NY are:

What cities near Buffalo, NY are hiring for Senior Technology Risk Management jobs?

Cities near Buffalo, NY with the most Senior Technology Risk Management job openings:

Senior First Line Risk Specialist - Technology

M&T Bank

Buffalo, NY • On-site

$95K/yr

Full-time

Re-posted 20 days ago


M&T Bank rating

7.9

Company rating: 7.9 out of 10

Based on 186 frontline employees who took The Breakroom Quiz

79th of 171 rated banks


Job description

This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week.
Overview:
Leads risk assessments and control evaluations for complex Technology initiatives, influencing the organization's risk framework and providing advanced guidance to leadership for informed decision-making aligned with business objectives and regulatory expectations. Serves as a trusted risk and audit partner, helping ensure effective governance, controls, compliance, and resiliency across Technology functions.
Primary Responsibilities:
  • Develop and implement strategic approaches for evaluating technology and cybersecurity risks, control effectiveness, and audit readiness across critical technology capabilities.
  • Lead complex risk assessments, control reviews, risk and control self-assessments (RCSAs), audit support activities, and process evaluations to identify, assess, and communicate risks and control gaps.
  • Develop and execute risk management frameworks and programs that align technology practices with business objectives, internal control standards, and regulatory requirements.
  • Partner with Technology, Cybersecurity, Risk Management, Internal Audit, and business stakeholders to assess control environments, evaluate risk exposure, and support remediation of identified issues.
  • Drive adherence to risk management, governance, and control frameworks while providing expert guidance on regulatory expectations, audit requirements, and industry best practices.
  • Lead and independently manage complex bodies of work, including risk reviews, control assessments, audit engagement support, regulatory preparedness activities, and cross-functional initiatives with limited oversight.
  • Coordinate preparation for regulatory examinations, internal audits, and external reviews, including reviewing responses for accuracy, managing documentation requests, organizing exam materials, and tracking follow-up actions.
  • Collaborate with senior leaders across Technology, Cybersecurity, Risk, Internal Audit, and Regulatory Affairs to support effective risk governance and regulatory compliance.
  • Identify opportunities to enhance risk management and control evaluation methodologies and recommend improvements that strengthen the organization's overall risk posture.
  • Provide guidance and mentorship to analysts and risk professionals, sharing expertise in risk management, audit practices, controls, and regulatory expectations.
  • Contribute to the design and delivery of training programs that strengthen knowledge of technology risk, cybersecurity risk, governance, controls, and audit readiness.
  • Understand and adhere to the Company's risk and regulatory standards, policies, and controls in accordance with the Company's Risk Appetite. Identify risk-related issues requiring escalation.
  • Promote an environment that supports belonging and reflects the M&T Bank brand.
  • Maintain M&T internal control standards, including timely implementation of audit recommendations, regulatory actions, and remediation activities.
  • Complete other related duties as assigned.

Scope of Responsibilities:
  • This role primarily interacts with senior people leaders within the Technology and Cybersecurity teams, senior people leaders of Technology and Cybersecurity Risk, and internal partners such as the Risk Division, Internal Audit, and Regulatory Affairs.
  • Work is accomplished with periodic direction. The position exercises judgement in selecting methods, techniques, and evaluation criteria in obtaining results. It exerts significant latitude in determining objective of assignment and takes calculated risks with consultation from expert.
  • This role may present to Regulators under direction of senior Technology and Cybersecurity Risk leaders.

Education and Experience Required:
  • Bachelor's degree and a minimum of 7 years' relevant work experience, or in lieu of a degree, a combined minimum of 11 years' higher education and/or work experience
  • Demonstrated expert knowledge of Technology, Cybersecurity, Audit and/or risk principles
  • Minimum of 6 years' relevant work experience in or with the specific Technology, Audit, Cybersecurity risk area and/or business unit

Education and Experience Preferred:
  • Master's degree in Information Technology, Computer Science, Cybersecurity, Business Administration, Accounting, Finance, Law, or a related field.
  • Experience working within banking, financial services, fintech, money movement, or other highly regulated industries.
  • Professional certifications such as:
    • Certified Information Systems Auditor (CISA)
    • Certified in Risk and Information Systems Control (CRISC)
    • Certified Information Security Manager (CISM)
    • Certified Information Systems Security Professional (CISSP)
  • Strong understanding of audit practices, internal controls, risk assessment methodologies, and regulatory expectations
  • Demonstrated ability to independently structure and lead complex workstreams in ambiguous environments.
  • Excellent communication, stakeholder management, and executive presentation skills.
  • Experience partnering with senior leadership to develop solutions aligned with business objectives and regulatory requirements.
  • Proven ability to influence stakeholders, build consensus, and drive outcomes across cross-functional teams.
  • Ability to mentor and coach peers while serving as a trusted advisor on risk, controls, and audit-related matters.

#LI-JB3 #Hybrid
M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $123,600.00 - $206,000.00 Annual (USD). The successful candidate's particular combination of knowledge, skills, and experience will inform their specific compensation.
Location
Buffalo, New York, United States of America

What M&T Bank employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom