Enterprise Risk and Control Office Program Consultant

Overview:
This position supports the development and delivery of second line Enterprise Risk Management services in line with area policies, industry standards, and management expectations. Within this team, the role holder is expected to have a working knowledge of Risk and Control Frameworks, Issues Management, and Key Risk Indicators. The position supports line management and senior leadership by providing risk-related information and analysis for the businesses or functions supported and coordinating information sharing with other risk partners.

The position contributes to activities that help the Bank keep pace with the evolving risk management environment and identifies opportunities for continuous improvement in the execution of practices within the Risk Management Division. The position requires the ability to execute assigned activities in support of the services described above and contributes to the development of program-level activities. Activities performed help the Bank and supported areas adhere to the enterprise risk framework and stakeholder expectations, up to and including the Board.

The position has a comprehensive understanding of the business or functions it supports and serves as a knowledgeable resource within its area of responsibility.

Primary Responsibilities:

Support one or more Enterprise Risk Management activities within a similar area or contribute to activities that span across the Bank. Work horizontally across the Bank to drive the development, implementation, and ongoing maintenance of the Risk and Control Program, including its supporting policies, standards, guidelines, metrics, and reporting, in collaboration with stakeholders across the Bank. Support the development, implementation, and ongoing maintenance of the Issues Management Program, including related processes, reports, governance, training, and educational materials, to promote consistent issue identification, assessment, escalation, remediation, and closure across the Bank.

Support complex, judgment-based evaluations of key risk processes and related work products to identify gaps or deficiencies, inform business decisions, and assess whether remediation appropriately addresses the risk. Contribute to quality reviews to help ensure work products are accurately prepared and appropriate for the intended audience. Collect and analyze data; develop routine and ad hoc reports that monitor Control Effectiveness and Issues Management program adherence and project activity;

identify reporting improvements; and prepare and present materials for business partners, senior management, and risk committees. Support coordination among first-line businesses, second-line risk partners, senior leaders, Legal, and Internal Audit to promote timely two-way communication and escalation of material or unresolved concerns. Assist with departmental participation in risk committees, management forums, audits, regulatory inquiries, examinations, and related status updates, as assigned.

Support and participate in the design, implementation, and continuous improvement of processes, projects, programs, and plans that advance short- and long-term business objectives and help resolve risk issues. Draft, review, and maintain procedures, process documentation, training, and related materials, and contribute to enhancements in information used to assess and communicate risk. Support departmental systems by coordinating with internal business partners, vendors, and technology teams to help address issues for the department.

Complete required Bank, Division, and Department training; proactively maintain relevant professional and organizational knowledge, including new Bank initiatives and methodologies. Limited travel may be required for seminars and conferences. Promote an environment that supports belonging and reflects the M&T Bank brand. Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.

Complete other related duties as assigned.

Scope of Responsibilities:
The incumbent will be responsible for Enterprise Risk Management activities as assigned, as well, build the necessary Bank-wide partnerships to support the enterprise risk division. In addition, the incumbent will partner with Risk Division leaders, Technology and work alongside business partners to ensure the…