Jobs at KeyBank

Leads complex internal audit reviews across planning, fieldwork, and reporting. Responsibilities include evaluating internal controls, identifying and mitigating risks, ensuring regulatory compliance, drafting and presenting findings, managing audit staff, providing performance feedback, and serving as a subject matter expert. The role also supports risk intelligence, training, ad hoc projects, and senior leadership reporting.

Leads KeyBank’s Red Team and offensive security program, including adversary emulation, penetration testing, physical and application assessments, cloud security testing, AI security evaluations, and purple team exercises. Develops testing strategy, methodologies, tooling, metrics, and maturity roadmaps; mentors engineers; coordinates internal and third-party engagements; validates remediation and attack paths; and presents findings and strategic recommendations to executives and cybersecurity stakeholders.

Leads analysis, design, development, testing, deployment, and maintenance of banking software on mainframe systems. Owns production-ready code, architectural design, reliability, performance, security, compliance, code reviews, debugging, testing, release management, and continuous improvement. Collaborates across teams using agile and DevOps practices while supporting large transaction-based systems and minimizing customer impact.

Advance the cyber threat intelligence program by collecting and analyzing threat data, producing strategic forecasts and executive briefings, assessing control gaps, and translating cyber, geopolitical, financial services, and emerging technology risks into business decisions. The role supports incident response, risk prioritization, threat hunting, vulnerability management, exercises, intelligence sharing, stakeholder engagement, and mentorship of junior analysts.

Administer and enhance enterprise data security platforms, including SecuPi, while implementing access controls, masking, encryption, tokenization, monitoring, classification, and DLP across databases, cloud platforms, applications, and AI services. The role integrates security tools with IAM, PAM, SIEM, SOAR, and monitoring systems; troubleshoots complex environments; develops automation; investigates anomalous access; supports audits and incidents; and partners with infrastructure, cloud, database, application, privacy, and governance teams.

Lead KeyBank's Commercial DACA program end-to-end: product strategy, onboarding, servicing, risk, profitability, and CX. Manage a DACA team, partner with tech and vendors, support sales, drive process improvements, reporting, and compliance while delivering product roadmaps and performance monitoring.

Leads end-to-end Commercial Card modification projects, coordinating clients, sales, vendors, FinTech partners, and internal teams. Manages project scope, configuration, training, adoption, stakeholder expectations, risks, timelines, and service-level commitments. The role requires expertise in financial services and Commercial Card products, client escalation management, process improvement, analytical problem-solving, and strong communication. It also supports business resiliency and compliance with risk policies while managing multiple implementations in parallel.

Leads enterprise cybersecurity incident response, coordinating containment, escalation, stakeholder communications, documentation, and resolution tracking. Owns the incident response program, including playbooks, runbooks, governance, metrics, tabletop exercises, post-incident reviews, audit support, executive reporting, and continuous improvement. Partners with security, technology, business, legal, risk, compliance, communications, and third-party teams to strengthen threat-informed readiness and response capabilities. May provide after-hours support during significant incidents or exercises.

Supports information security governance programs covering data retention and protection, eDiscovery, legal holds, insider risk, investigations, and regulatory compliance. Develops policies and governance processes, assesses risks and control gaps, administers retention and destruction activities, supports litigation and audit requests, investigates insider risk events, manages related technologies and vendors, and delivers reports and executive communications. Partners with Legal, Compliance, HR, Corporate Security, Technology, and business stakeholders.

Supports Payments Advisors and business partners through pipeline management, financial modeling, payment process analysis, deal audits, industry research, reporting, presentations, RFP responses, and client onboarding. Collaborates with fintech partners and product teams on payment solution development and integrations. Builds client relationships, supports business development and strategic solution roadmaps, and uses Salesforce, Tableau, and industry tools to develop reporting and analytical insights.

Reviews commercial credit files and portfolios to independently validate risk ratings, assess underwriting and portfolio management quality, identify problem exposures, analyze credit trends, and evaluate adherence to lending policies, regulations, and risk methodologies. The associate writes review reports, communicates findings and recommendations, collaborates with credit and business teams, participates in special projects, and maintains current knowledge of credit review practices and regulatory expectations.

Supports the commercial growth and execution of KeyBank’s treasury fraud product portfolio. Responsibilities include product analytics, SQL-based reporting, dashboard development, campaign and client enablement, funnel and revenue analysis, pricing support, data governance, risk reporting, and cross-functional coordination with product, sales, technology, operations, risk, compliance, and vendors.

Conduct qualitative and quantitative due diligence on fixed income, private credit, alternative, infrastructure, and hedge fund investment managers. Source and evaluate strategies, analyze performance, risk, holdings, and organizational factors, and prepare recommendations. Participate in manager meetings, monitoring, asset class reviews, market mapping, thematic research, portfolio construction discussions, risk assessments, and model oversight while communicating investment insights to internal stakeholders.

Manages risk across treasury receivables and fraud products, develops risk frameworks, supports audits and regulatory examinations, leads client risk escalations and remediation, and strengthens first-line risk governance through reporting, KPIs, benchmarking, and cross-functional forums. Partners with product, operations, compliance, analytics, and technology teams to identify mitigations, improve processes, and automate workflows while communicating recommendations to risk leaders and stakeholders.

Design and maintain enterprise data domain models, taxonomies, and ontologies to make data AI-ready. Operationalize semantic models through the enterprise data catalog, resolve semantic conflicts, define metadata priorities, and partner with analytics and AI teams to enable governed, explainable AI and LLM use cases.

10-week remote Internal Audit internship performing audit planning, fieldwork, and reporting across lending, deposits, payments, compliance, and other lines. Interns receive training, mentoring, networking, present a final Spotlight to senior leaders, and may be considered for a full-time rotational analyst role based on performance.

The Risk Governance Manager oversees governance activities for Commercial lending, managing risk assessments, regulatory readiness, and executive reporting, while fostering collaboration with business and risk stakeholders.