Jobs at KeyBank

Prepares, validates, analyzes, and submits Federal Reserve FR Y-14M/Q regulatory reports. Performs reconciliations, edit checks, data analysis, control execution, risk identification, documentation, issue remediation, and process improvements. Partners with Risk, Finance, Treasury, Data Management, Technology, and business stakeholders to support reporting governance, regulatory changes, data modernization, and organizational resilience.

Prepares, analyzes, validates, and submits FR Y-14M/Q regulatory reports. Serves as a subject matter expert, interprets regulatory changes, coordinates stakeholders, maintains reporting controls and governance, investigates data quality issues, supports audits and examinations, and drives process improvements, automation, data governance, and reporting transformation initiatives.

Designs, develops, and maintains Tableau dashboards, scorecards, and reporting solutions for compliance risk monitoring, control testing, regulatory reporting, and executive decision-making. Analyzes complex datasets, builds data models, validates data quality, connects multiple data sources, automates recurring reports, and supports audits and regulatory examinations. Collaborates with risk, audit, technology, and business teams while developing knowledge of banking products, source systems, regulations, and compliance frameworks.

Executes monthly interest rate risk and balance sheet modeling within QRM, validates inputs, analyzes outputs, performs stress testing and backtesting, and supports Treasury strategy. The role partners with data and technology teams, improves processes through Python and SQL automation, maintains controls and documentation, and translates complex risk metrics into presentations and insights for Treasury leadership and governance committees.

Leads risk-based internal audits across commercial lending and credit risk functions. Oversees complex engagements, evaluates controls, reviews workpapers, manages findings, supports risk assessments and audit planning, and advises leadership on regulatory and operational risks. Supervises, coaches, and develops audit staff while communicating conclusions and recommendations to business leaders, regulators, compliance teams, and executives.

Designs, trains, evaluates, and operationalizes intelligent document-processing solutions using OCR, machine learning, LLMs, Python, and cloud data pipelines. Builds extraction, validation, reconciliation, exception-handling, and human-review workflows for sensitive information. Develops secure, auditable, configuration-driven systems with API integrations, monitoring, testing, CI/CD, and infrastructure as code. Partners with business experts to define document fields, quality thresholds, validation rules, and acceptance criteria.

Perform manual application and API penetration testing, validate SAST, SCA, and DAST findings, assess cloud security across AWS, Azure, and GCP, and identify vulnerabilities and misconfigurations. Integrate security into CI/CD pipelines, develop scripting and command-line tooling, support remediation and secure coding, participate in architecture reviews, and report security metrics. The role also uses CSPM capabilities and AI-enabled development and security assistants.

Configures and optimizes DAST and API security scanning across applications, APIs, and CI/CD pipelines. Performs manual application penetration testing, validates SAST/SCA/DAST findings, assesses cloud security across AWS, Azure, and GCP, and develops scripting and CLI tooling. Partners with development, DevOps, and cloud teams to remediate vulnerabilities, improve secure coding, conduct architecture reviews, and track security metrics.

Owns the product experience and strategic direction for KeyBank’s commercial merchant acquiring products. The role leads partnership development, product commercialization, sales training, solution demonstrations, third-party integrations, reporting, and stakeholder collaboration. Responsibilities include working with processors and payment platforms, supporting revenue growth, managing product P&L, mitigating risk, identifying business opportunities, and influencing sales, marketing, technology, operations, finance, legal, compliance, merchants, and external partners.

Serves as the primary financial advisor and relationship manager for commercial agribusiness clients. Leads business development, prospecting, portfolio management, credit underwriting, risk assessment, cross-selling, and strategic client advisory. Develops customized banking solutions, manages asset quality and profitability, collaborates with product and credit teams, leads client reviews, and mentors junior relationship managers. Requires strong commercial banking, credit, financial analysis, sales, and agribusiness expertise.

Supports Payments Advisors and business partners through pipeline management, financial modeling, payment process analysis, deal audits, industry research, reporting, presentations, RFP responses, and client onboarding. Collaborates with fintech partners and product teams on payment solution development and integrations. Builds client relationships, supports business development and strategic solution roadmaps, and uses Salesforce, Tableau, and industry tools to develop reporting and analytical insights.

Conduct independent third-line credit risk reviews of complex private credit and commercial lending portfolios. Assess underwriting quality, risk ratings, covenant compliance, collateral, portfolio trends, concentration risks, regulatory adherence, and risk governance. Lead review teams, identify emerging credit weaknesses, produce reports and recommendations, advise senior management, mentor junior reviewers, and support special projects and continuous risk intelligence activities.

Leads data security governance across database monitoring, encryption, certificate and key management, HSM operations, data masking, and cryptographic asset inventory. Manages a security governance team, develops controls and procedures, supports audits and regulatory inquiries, partners cross-functionally, and drives post-quantum cryptography readiness, automation, metrics, service reliability, and operational maturity.

Leads risk-based internal audits of complex enterprise projects, technology transformations, regulatory programs, and emerging technology initiatives. Evaluates governance, risk management, controls, project health, and regulatory compliance; documents findings; communicates recommendations to senior leaders; monitors remediation; coordinates cross-functional audit teams; mentors staff; and improves technology risk oversight capabilities.

Partners with Commercial Bank leadership to analyze financial performance, forecast loan portfolio and fee growth, develop profitability models, report on market performance, identify risks and opportunities, and present insights to senior leaders. The role also supports regulatory reporting, strategic initiatives, and ad hoc financial analysis while building relationships across teams.

The Technical Lead will design, build, and modernize IVR and Voice Bot platforms, providing technical ownership and leadership in a hands-on role within the Contact Center Technology department.

Leads KeyBank’s Red Team and offensive security program, including adversary emulation, penetration testing, physical and application assessments, cloud security testing, AI security evaluations, and purple team exercises. Develops testing strategy, methodologies, tooling, metrics, and maturity roadmaps; mentors engineers; coordinates internal and third-party engagements; validates remediation and attack paths; and presents findings and strategic recommendations to executives and cybersecurity stakeholders.

Leads analysis, design, development, testing, deployment, and maintenance of banking software on mainframe systems. Owns production-ready code, architectural design, reliability, performance, security, compliance, code reviews, debugging, testing, release management, and continuous improvement. Collaborates across teams using agile and DevOps practices while supporting large transaction-based systems and minimizing customer impact.

Supports information security governance programs covering data retention and protection, eDiscovery, legal holds, insider risk, investigations, and regulatory compliance. Develops policies and governance processes, assesses risks and control gaps, administers retention and destruction activities, supports litigation and audit requests, investigates insider risk events, manages related technologies and vendors, and delivers reports and executive communications. Partners with Legal, Compliance, HR, Corporate Security, Technology, and business stakeholders.