Jobs at KeyBank

Executes monthly interest rate risk and balance sheet modeling within QRM, validates inputs, analyzes outputs, performs stress testing and backtesting, and supports Treasury strategy. The role partners with data and technology teams, improves processes through Python and SQL automation, maintains controls and documentation, and translates complex risk metrics into presentations and insights for Treasury leadership and governance committees.

The Sr. Cybersecurity Operational Risk Officer manages operational and technology risks, provides oversight, collaborates with teams, and enhances risk frameworks. They evaluate projects and compliance, conduct assessments, and maintain relationships with business leaders.

Coordinates Treasury reporting, governance, controls, policies, procedures, and regulatory compliance initiatives. Partners with Corporate Treasury, Finance, Risk Management, Regulatory Reporting, oversight, audit, and project management teams to ensure accurate reporting, manage operational and financial risks, resolve regulatory constraints, and communicate treasury strategies to internal and external stakeholders. Supports continuous improvement and requires strong treasury, risk management, communication, and leadership skills.

The Senior Compliance Manager leads operational risk testing teams, ensuring compliance with regulations, executing monitoring activities, and developing risk management strategies while collaborating with internal teams and maintaining relationships with management.

Serves as the primary financial advisor and relationship manager for commercial agribusiness clients. Leads business development, prospecting, portfolio management, credit underwriting, risk assessment, cross-selling, and strategic client advisory. Develops customized banking solutions, manages asset quality and profitability, collaborates with product and credit teams, leads client reviews, and mentors junior relationship managers. Requires strong commercial banking, credit, financial analysis, sales, and agribusiness expertise.

Supports Payments Advisors and business partners through pipeline management, financial modeling, payment process analysis, deal audits, industry research, reporting, presentations, RFP responses, and client onboarding. Collaborates with fintech partners and product teams on payment solution development and integrations. Builds client relationships, supports business development and strategic solution roadmaps, and uses Salesforce, Tableau, and industry tools to develop reporting and analytical insights.

Conduct independent third-line credit risk reviews of complex private credit and commercial lending portfolios. Assess underwriting quality, risk ratings, covenant compliance, collateral, portfolio trends, concentration risks, regulatory adherence, and risk governance. Lead review teams, identify emerging credit weaknesses, produce reports and recommendations, advise senior management, mentor junior reviewers, and support special projects and continuous risk intelligence activities.

Leads data security governance across database monitoring, encryption, certificate and key management, HSM operations, data masking, and cryptographic asset inventory. Manages a security governance team, develops controls and procedures, supports audits and regulatory inquiries, partners cross-functionally, and drives post-quantum cryptography readiness, automation, metrics, service reliability, and operational maturity.

Leads risk-based internal audits of complex enterprise projects, technology transformations, regulatory programs, and emerging technology initiatives. Evaluates governance, risk management, controls, project health, and regulatory compliance; documents findings; communicates recommendations to senior leaders; monitors remediation; coordinates cross-functional audit teams; mentors staff; and improves technology risk oversight capabilities.

Partners with Commercial Bank leadership to analyze financial performance, forecast loan portfolio and fee growth, develop profitability models, report on market performance, identify risks and opportunities, and present insights to senior leaders. The role also supports regulatory reporting, strategic initiatives, and ad hoc financial analysis while building relationships across teams.

The Technical Lead will design, build, and modernize IVR and Voice Bot platforms, providing technical ownership and leadership in a hands-on role within the Contact Center Technology department.

Leads KeyBank’s Red Team and offensive security program, including adversary emulation, penetration testing, physical and application assessments, cloud security testing, AI security evaluations, and purple team exercises. Develops testing strategy, methodologies, tooling, metrics, and maturity roadmaps; mentors engineers; coordinates internal and third-party engagements; validates remediation and attack paths; and presents findings and strategic recommendations to executives and cybersecurity stakeholders.

Leads analysis, design, development, testing, deployment, and maintenance of banking software on mainframe systems. Owns production-ready code, architectural design, reliability, performance, security, compliance, code reviews, debugging, testing, release management, and continuous improvement. Collaborates across teams using agile and DevOps practices while supporting large transaction-based systems and minimizing customer impact.

Leads enterprise cybersecurity incident response, coordinating containment, escalation, stakeholder communications, documentation, and resolution tracking. Owns the incident response program, including playbooks, runbooks, governance, metrics, tabletop exercises, post-incident reviews, audit support, executive reporting, and continuous improvement. Partners with security, technology, business, legal, risk, compliance, communications, and third-party teams to strengthen threat-informed readiness and response capabilities. May provide after-hours support during significant incidents or exercises.

Supports information security governance programs covering data retention and protection, eDiscovery, legal holds, insider risk, investigations, and regulatory compliance. Develops policies and governance processes, assesses risks and control gaps, administers retention and destruction activities, supports litigation and audit requests, investigates insider risk events, manages related technologies and vendors, and delivers reports and executive communications. Partners with Legal, Compliance, HR, Corporate Security, Technology, and business stakeholders.