Technology Resilience and Recovery Infrastructure Analyst IV

This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week

Overview:

The Infrastructure Analyst IV serves as a subject matter expert for Technology Resilience & Recovery team. The role provides expert guidance, independent analysis, and technical leadership to strengthen the recoverability and resilience of the Bank’s applications, infrastructure, platforms, and technology services.

This position leads complex Technology Recovery Plan reviews, evaluates architecture and platform functionality, develops and reviews recovery and resilience exercises, and translates technical and business continuity requirements into practical recovery strategies. The analyst partners across Technology and with Business Continuity and Risk stakeholders to identify gaps, recommend improvements, report results, and advance consistent, sustainable recovery practices across the enterprise.

PRIMARY RESPONSIBILITIES

Lead the planning, design, assessment, and validation of resilience and recovery capabilities for critical and non-critical applications, infrastructure, platforms, and supporting technology services.

Perform expert-level reviews of Technology Recovery Plans, recovery procedures, dependency information, recovery strategies, and supporting evidence for completeness, accuracy, technical feasibility, and alignment with established requirements.

Lead technology architecture and design reviews with application, infrastructure, engineering, operations, architecture, and cloud teams to evaluate recoverability, resilience patterns, single points of failure, dependencies, capacity considerations, and recovery sequencing.

Assess platform functionality and recovery capabilities across on-premises, hybrid, hosted, SaaS, and cloud environments, including Microsoft Azure, and recommend improvements that strengthen service continuity and recoverability.

Design, plan, coordinate, facilitate, and evaluate complex disaster recovery and technology resilience exercises, including scenario development, test objectives, recovery validation, issue management, results reporting, and after-action reviews.

Analyze Technology Application Impact Analysis, recovery objectives, and related continuity inputs to confirm that technology recovery strategies support business requirements.

Develop clear executive and stakeholder reporting that communicates exercise outcomes, recovery readiness, material gaps, risk themes, remediation recommendations, and program performance.

Lead cross-functional discussions and direct communications among Disaster Recovery, Business Continuity, Technology Operations, Technology Architecture, Engineering, Application Development, Risk, third-party service providers, and business stakeholders.

Identify, document, track, and escalate recovery risks and control gaps; partner with accountable teams to establish practical remediation plans and validate closure evidence.

Advance, formalize, and standardize recovery planning, exercise, governance, reporting, forecasting, and tracking practices while promoting consistent adoption across Technology.

Research emerging threats, regulatory expectations, industry practices, architecture patterns, and technologies that may affect disaster recovery, cloud resilience, operational continuity, or enterprise recoverability.

Develop and deliver training, working sessions, town halls, and presentations for technical teams, business partners, leadership, and other stakeholders.

Mentor and provide technical guidance to team analysts; review complex work products and promote knowledge sharing, quality, and consistent execution.

Manage multiple complex assignments independently, make sound recommendations with limited direction, and communicate issues requiring leadership attention in a timely manner.

Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Maintain M&T internal control standards, including timely implementation of internal and external audit points and issues raised by external regulators, as applicable.

Complete other related duties as assigned.

SCOPE OF RESPONSIBILITY

Senior individual contributor and department subject matter expert responsible for complex, enterprise-impacting resilience and recovery assignments. The role may lead workstreams, exercises, reviews, and cross-functional initiatives and may provide work guidance to other analysts.

EDUCATION AND EXPERIENCE REQUIRED

A combined minimum of eight (8) years of higher education and/or relevant work experience, including at least six (6) years of experience in technology infrastructure, systems engineering, application support, technology architecture, disaster recovery, technology resilience, business continuity, or a related discipline.

Demonstrated expert-level experience with disaster recovery and technology resilience program execution, recovery planning, plan review, exercise design and facilitation, results analysis, issue remediation, and the recovery program lifecycle.

Demonstrated experience reviewing technology architectures, platform designs, system integrations, infrastructure dependencies, and application recovery strategies across complex enterprise environments.

Experience evaluating cloud and hybrid-platform recoverability, including Microsoft Azure services, architecture, dependencies, availability capabilities, backup and restoration, and recovery considerations.

Advanced knowledge of business continuity and technology recovery concepts, including RTO, RPO, MTD, BIA, AIA, technology/application impact analysis, risk assessment, third-party continuity, and operational resilience.

Experience leading complex cross-functional initiatives and working independently with technical and non-technical partners at multiple organizational levels.

Experience preparing clear technical documentation, executive-ready reporting, recommendations, presentations, and training materials.

Strong analytical, problem-solving, facilitation, written communication, and verbal communication skills.

Proficiency with Microsoft 365 applications, including Excel, Word, PowerPoint, Teams, and SharePoint, and experience using reporting or data-visualization tools such as Power BI or equivalent.

Ability to manage multiple complex priorities, gather and analyze requirements, challenge assumptions constructively, and translate business and technical requirements into actionable recovery solutions.

Working knowledge of financial services risk, control, audit, and regulatory expectations, or demonstrated ability to apply equivalent requirements within another regulated environment.

EDUCATION AND EXPERIENCE PREFERRED

Bachelor’s degree in information technology, information systems, computer science, engineering, cybersecurity, business continuity, or a related field.

Advanced experience with Microsoft Azure architecture and services; relevant Microsoft Azure certification such as AZ-900, Azure Administrator, Azure Solutions Architect, or equivalent practical experience.

Professional certification in disaster recovery, business continuity, operational resilience, cloud, architecture, infrastructure, or risk, such as CBCP, CBCI, EDRP, CDRE, ISO 22301, or an equivalent credential.

Experience with enterprise infrastructure technologies, including Windows and Linux operating systems, networking, databases, middleware, storage, backup and recovery, virtualization, automation, and infrastructure as code.

Experience with third-party or externally hosted service continuity, vendor recovery capabilities, SaaS resilience, contractual recovery considerations, and review of external business continuity or disaster recovery evidence.

Experience with Jira, Confluence, ServiceNow, Fusion Risk Management, Workday, or comparable workflow, governan