Business Systems Analyst - SDLC Metrics, Governance & Process Analytics

Job Summary

The Business Systems Analyst - SDLC Metrics, Governance & Process Analytics will support the enterprise SDLC Program by defining, documenting, analyzing, and reporting SDLC metrics that measure compliance, control effectiveness, adoption, process efficiency, operational performance, governance health, and improvement opportunities. This role reports to the SDLC Program Governance Lead and helps translate SDLC program objectives into meaningful metrics, dashboards, insights, and governance reporting.

This role serves as a key execution partner by helping define KPIs, KRIs, data requirements, reporting routines, dashboard logic, evidence expectations, and analytical insights that support SDLC governance, audit readiness, compliance monitoring, control effectiveness, and continuous improvement. The role will also support process documentation, user guidance, communications, and stakeholder support responsibilities similar to the SDLC Standards, Process & Adoption BSA role, but with a heavier emphasis on measurement, reporting, analytics, and governance insights.

Primary Focus

• SDLC metrics definition, governance reporting, dashboard requirements, and analytics.
• Compliance monitoring, control effectiveness indicators, process efficiency insights, and audit readiness support.
• Data-driven identification of improvement opportunities across SDLC workflows, artifacts, approvals, controls, and user adoption.
• Support for executive-ready SDLC reporting, steering committee materials, and recurring governance routines.
• Support for the SDLC Program Governance Lead in building a measurable, monitored, and continuously improving SDLC operating model.

Key Responsibilities

• Define, document, and maintain SDLC metrics, KPIs, KRIs, data definitions, reporting logic, business rules, metric thresholds, and interpretation guidance.
• Partner with the SDLC Program Governance Lead to establish meaningful measures of SDLC health, including compliance, adoption, process effectiveness, control performance, workflow performance, artifact quality, audit readiness, risk trends, and improvement outcomes.
• Translate SDLC data into clear insights, trends, risks, decisions needed, improvement opportunities, and governance recommendations.
• Maintain metric documentation that clearly defines purpose, source systems, calculation logic, intended audience, known limitations, data owners, and expected actions.
• Develop metrics to assess SDLC compliance with standards, procedures, control requirements, permit expectations, artifact completion, approval requirements, evidence storage, and workflow usage.
• Analyze trends in exceptions, escalations, permit applicability, workflow outcomes, artifact quality, approval cycle times, user questions, recurring defects, and process bottlenecks.
• Identify opportunities to improve SDLC process efficiency, reduce rework, clarify decision points, streamline approvals, simplify workflow routing, and improve user experience.
• Analyze ServiceNow SDLC Permit Workflow data, Change RFC data, Jira/Agile delivery data, Zephyr/testing data, training completion data, office hour themes, and user support trends where available.
• Evaluate process performance across SDLC subprocesses such as requirements management, permit governance, technology architecture and design, development/build, testing/verification, transition to operations, and post-deployment review.
• Support recurring SDLC improvement cycles by providing data-driven insights that inform prioritization, governance decisions, process enhancements, training updates, and communications.
• Define dashboard requirements, reporting views, filters, drill-downs, executive summaries, trend analyses, and operational scorecards for SDLC governance.
• Partner with tooling and reporting teams to ensure Jira, Zephyr, ServiceNow, SharePoint, Power BI, training systems, evidence repositories, and related platforms can support SDLC reporting needs.
• Develop clear narratives and executive-ready summaries that explain metric results, risks, trends, decisions needed, and recommended actions.
• Support users and stakeholders with questions related to SDLC workflow reporting, permit status, artifact tracking, approval visibility, compliance expectations, and data interpretation.

Required Qualifications

• Combined minimum of 8 years' combined higher education and/or operational/business analytics/systems development experience
• Experience as a Business Systems Analyst, Data Analyst, Reporting Analyst, Process Analyst, Governance Analyst, Risk/Controls Analyst, or similar role.
• Experience defining business metrics, KPIs, KRIs, reporting requirements, data definitions, dashboard requirements, business rules, and process performance measures.
• Strong analytical skills with the ability to interpret data, identify trends, assess risk, and translate findings into practical recommendations.
• Understanding of SDLC processes, technology delivery, Agile/SAFe delivery practices, requirements management, testing, change/release management, production readiness, or technology governance.
• Experience supporting compliance, controls, audit readiness, governance reporting, process improvement, or risk management activities.
• Ability to document metric definitions, reporting logic, data sources, assumptions, limitations, and action thresholds.
• Strong written and verbal communication skills, including the ability to create executive-ready summaries and explain complex data to non-technical audiences.
• Strong stakeholder management, facilitation, collaboration, and user support skills.

Preferred Qualifications

• Experience in financial services, banking, technology risk management, internal controls, audit, regulatory readiness, or enterprise governance.
• Experience with ServiceNow, Jira, Zephyr, Power BI, SharePoint, Confluence, Excel, SQL, data visualization tools, or workflow reporting platforms.
• Experience with SDLC metrics, software delivery metrics, control testing, compliance reporting, process mining, operational dashboards, or governance scorecards.
• Experience working with cross-functional stakeholders across Technology, Risk, Audit, Compliance, Cybersecurity, Enterprise Architecture, Change Management, and delivery teams.
• Certifications such as CBAP, CCBA, PMI-PBA, SAFe, CSM, PMP, Lean Six Sigma, ITIL, COBIT, data analytics, or risk/control-related certifications.

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $103,000.00 - $171,600.00 Annual (USD). The successful candidate's particular combination of knowledge, skills, and experience will inform their specific compensation.

Location

Buffalo, New York, United States of America