Risk Process Technical Specialist

CTI Staffing

. Formulate business requirements driving implementation or enhancement of technologies for centralized control assessment objectives, including vulnerability scanning, penetration testing, server compliance assessment, and static code analysis tools .

Posted 10/8/2026contractRemote • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability assessment tools, technical writing, and compliance standards within the cybersecurity domain. Capable of leading teams, developing operational procedures, and maintaining internal control standards while adhering to regulatory requirements.

Highest-signal resume keywords

Vulnerability Assessment ToolsTechnical Writing SkillsCybersecurity StandardsIncident ResponseVulnerability Risk Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ScanningPenetration TestingServer Compliance AssessmentStatic Code AnalysisTest Script DevelopmentOperational Procedure DocumentationAudit Data ManagementProcess Enhancement ImplementationEscalation Procedure DevelopmentRisk Assessment

Soft Skills

Customer-Service OrientationExcellent Communication SkillsDetail-OrientedTeam LeadershipMentoring

Tools & Technologies

Vulnerability Risk Management PlatformScanning SolutionsEGRCArcher VRM

Certifications & Qualifications

CISSPCRISC

Industry Keywords

Risk ManagementRegulatory StandardsInternal Control StandardsAudit ComplianceCybersecurity

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Formulate business requirements driving implementation or enhancement of technologies for centralized control assessment objectives, including vulnerability scanning, penetration testing, server compliance assessment, and static code analysis tools
Configure centralized control assessment technologies
Develop and document operational procedures for centralized control assessment technologies
Identify, evaluate, and implement process and reporting enhancements; support the vulnerability assessment team
Participate in conversations with centralized assessment technology vendors
Develop test scripts for implementations or upgrades and document test results
Design and document technical compliance standards for Bank systems and infrastructure
Develop escalation procedures to track and remediate centralized control assessment findings
Research and train on industry trends; share information with management and the Risk Process team
Provide input during the annual budgeting process
Own relationships with Technology teams supporting centralized assessment technologies
Lead, supervise, and mentor less experienced Risk Process Team members
Adhere to the Company's risk and regulatory standards, policies, controls, and Risk Appetite
Identify risk-related issues requiring escalation to management
Promote diversity and reflect the M&T Bank brand
Maintain internal control standards and implement internal/external audit points and applicable regulatory issues in a timely manner
Complete other related duties as assigned

Requirements

What you’ll need

Associate degree and a minimum of 7 years relevant work experience, or in lieu of a degree, a combined minimum of 9 years higher education and/or work experience, including a minimum of 7 years relevant work experience
Prior experience with vulnerability assessment tools
Strong customer-service orientation
Excellent written and verbal communication skills
Prior experience working independently and providing direction to team as needed
Experience generating, collecting, storing and retaining audit data
Working knowledge in various scanning solutions and vulnerability risk management platform
Knowledge on Cybersecurity standards
Experience in technical writing skills
Bachelor's degree preferred
CISSP, CRISC and/or Cybersecurity domain-related industry-recognized certification preferred
Proficient technical writing skills preferred
Detail-oriented preferred
Prior experience with Incident Response preferred
Working knowledge on Vulnerability Risk Management lifecycle solutions (ex. Archer VRM) preferred
Working knowledge of eGRC preferred

Benefits

Comp & perks

Remote work arrangement