Jobs at KeyBank

The Senior Compliance Manager leads operational risk testing teams, ensuring compliance with regulations, executing monitoring activities, and developing risk management strategies while collaborating with internal teams and maintaining relationships with management.

The Sr. Cybersecurity Operational Risk Officer manages operational and technology risks, provides oversight, collaborates with teams, and enhances risk frameworks. They evaluate projects and compliance, conduct assessments, and maintain relationships with business leaders.

Provide client servicing and transaction support, identify financial wellness opportunities, educate clients on digital banking, process transactions and cash handling, meet activity and sales goals, collaborate with branch teammates, and follow compliance and security procedures. Hybrid branch role with proactive outreach and occasional Saturday work.

Provide investment advice and financial planning to mass-affluent clients, grow new and existing relationships, cross-sell bank products, meet sales and referral goals, coach branch staff, and coordinate investment product delivery while complying with KeyBank policies.

Leads data security governance across database monitoring, encryption, certificate and key management, HSM operations, data masking, and cryptographic asset inventory. Manages a security governance team, develops controls and procedures, supports audits and regulatory inquiries, partners cross-functionally, and drives post-quantum cryptography readiness, automation, metrics, service reliability, and operational maturity.

Leads risk-based internal audits of complex enterprise projects, technology transformations, regulatory programs, and emerging technology initiatives. Evaluates governance, risk management, controls, project health, and regulatory compliance; documents findings; communicates recommendations to senior leaders; monitors remediation; coordinates cross-functional audit teams; mentors staff; and improves technology risk oversight capabilities.

Partners with Commercial Bank leadership to analyze financial performance, forecast loan portfolio and fee growth, develop profitability models, report on market performance, identify risks and opportunities, and present insights to senior leaders. The role also supports regulatory reporting, strategic initiatives, and ad hoc financial analysis while building relationships across teams.

The Technical Lead will design, build, and modernize IVR and Voice Bot platforms, providing technical ownership and leadership in a hands-on role within the Contact Center Technology department.

Leads KeyBank’s Red Team and offensive security program, including adversary emulation, penetration testing, physical and application assessments, cloud security testing, AI security evaluations, and purple team exercises. Develops testing strategy, methodologies, tooling, metrics, and maturity roadmaps; mentors engineers; coordinates internal and third-party engagements; validates remediation and attack paths; and presents findings and strategic recommendations to executives and cybersecurity stakeholders.

Leads analysis, design, development, testing, deployment, and maintenance of banking software on mainframe systems. Owns production-ready code, architectural design, reliability, performance, security, compliance, code reviews, debugging, testing, release management, and continuous improvement. Collaborates across teams using agile and DevOps practices while supporting large transaction-based systems and minimizing customer impact.

Advance the cyber threat intelligence program by collecting and analyzing threat data, producing strategic forecasts and executive briefings, assessing control gaps, and translating cyber, geopolitical, financial services, and emerging technology risks into business decisions. The role supports incident response, risk prioritization, threat hunting, vulnerability management, exercises, intelligence sharing, stakeholder engagement, and mentorship of junior analysts.

Administer and enhance enterprise data security platforms, including SecuPi, while implementing access controls, masking, encryption, tokenization, monitoring, classification, and DLP across databases, cloud platforms, applications, and AI services. The role integrates security tools with IAM, PAM, SIEM, SOAR, and monitoring systems; troubleshoots complex environments; develops automation; investigates anomalous access; supports audits and incidents; and partners with infrastructure, cloud, database, application, privacy, and governance teams.

Leads end-to-end Commercial Card modification projects, coordinating clients, sales, vendors, FinTech partners, and internal teams. Manages project scope, configuration, training, adoption, stakeholder expectations, risks, timelines, and service-level commitments. The role requires expertise in financial services and Commercial Card products, client escalation management, process improvement, analytical problem-solving, and strong communication. It also supports business resiliency and compliance with risk policies while managing multiple implementations in parallel.

Leads enterprise cybersecurity incident response, coordinating containment, escalation, stakeholder communications, documentation, and resolution tracking. Owns the incident response program, including playbooks, runbooks, governance, metrics, tabletop exercises, post-incident reviews, audit support, executive reporting, and continuous improvement. Partners with security, technology, business, legal, risk, compliance, communications, and third-party teams to strengthen threat-informed readiness and response capabilities. May provide after-hours support during significant incidents or exercises.

Supports information security governance programs covering data retention and protection, eDiscovery, legal holds, insider risk, investigations, and regulatory compliance. Develops policies and governance processes, assesses risks and control gaps, administers retention and destruction activities, supports litigation and audit requests, investigates insider risk events, manages related technologies and vendors, and delivers reports and executive communications. Partners with Legal, Compliance, HR, Corporate Security, Technology, and business stakeholders.

Supports Payments Advisors and business partners through pipeline management, financial modeling, payment process analysis, deal audits, industry research, reporting, presentations, RFP responses, and client onboarding. Collaborates with fintech partners and product teams on payment solution development and integrations. Builds client relationships, supports business development and strategic solution roadmaps, and uses Salesforce, Tableau, and industry tools to develop reporting and analytical insights.

Reviews commercial credit files and portfolios to independently validate risk ratings, assess underwriting and portfolio management quality, identify problem exposures, analyze credit trends, and evaluate adherence to lending policies, regulations, and risk methodologies. The associate writes review reports, communicates findings and recommendations, collaborates with credit and business teams, participates in special projects, and maintains current knowledge of credit review practices and regulatory expectations.

Manages risk across treasury receivables and fraud products, develops risk frameworks, supports audits and regulatory examinations, leads client risk escalations and remediation, and strengthens first-line risk governance through reporting, KPIs, benchmarking, and cross-functional forums. Partners with product, operations, compliance, analytics, and technology teams to identify mitigations, improve processes, and automate workflows while communicating recommendations to risk leaders and stakeholders.

The Risk Governance Manager oversees governance activities for Commercial lending, managing risk assessments, regulatory readiness, and executive reporting, while fostering collaboration with business and risk stakeholders.