Director, Technology Controls Management Framework
About The Position
BNY is seeking a Director, Technology Controls Management Framework to join its Engineering Control Services team. The role is located in Pittsburgh, Pennsylvania, with consideration also given to candidates in Lake Mary, Florida. The Director stewards, evolves, and continuously improves the Technology Controls Management Framework across the Technology organization. Working with leaders across Infrastructure, Cybersecurity, Data, Software Engineering, Artificial Intelligence, Enterprise Risk, Internal Audit, and enterprise governance, the role establishes methodologies, governance practices, and engineering principles for designing, implementing, measuring, and improving technology controls in a consistent, risk-based manner. The role defines the framework within which individual technology organizations develop and operate their controls, including common methodologies, governance standards, control design principles, measurement practices, and alignment with recognized industry frameworks. It is a collaborative leadership position requiring influence and systems thinking to drive enterprise-wide consistency without direct ownership of the underlying technology organizations.
Requirements
- Bachelor's degree or equivalent combination of education and work experience.
- 10 or more years of progressively responsible experience in Technology Governance, Technology Risk, Information Security Governance, Controls Management, Operational Risk, or related disciplines.
- Demonstrated experience designing, implementing, or maturing enterprise governance or controls frameworks.
- Experience working within large, complex, highly regulated organizations.
- Strong understanding of Technology controls across infrastructure, cybersecurity, software engineering, cloud platforms, data, and emerging technologies.
- Experience working with Internal Audit, Enterprise Risk, regulators, and senior Technology leadership.
Nice To Haves
- Experience with COBIT, NIST Cybersecurity Framework, ISO 27001, ITIL, or comparable governance frameworks.
- Experience developing governance policies, standards, or enterprise methodologies.
- Professional certifications such as CGEIT, CRISC, CISA, CISSP, or equivalent.
Responsibilities
- Lead the evolution and maturity of the Technology Controls Management Framework, including its governance model, taxonomy, lifecycle, and methodologies.
- Maintain traceability across Technology risks, policies, standards, controls, evidence, testing, and control effectiveness measures.
- Author and govern centrally owned Technology policies, standards, methodologies, and supporting documentation, and provide oversight across Technology organizations.
- Ensure policies and standards translate into well-designed, measurable, and operationally effective controls.
- Define enterprise expectations and minimum engineering standards for technology control design, including automation, evidence, ownership, monitoring, testability, and measurable outcomes.
- Lead governance reviews of new and modified controls and drive simplification, standardization, and continuous improvement.
- Establish methodologies and standards for measuring control effectiveness, including KPIs, KCIs, KRIs, evidence collection, monitoring, testing, and control health reporting.
- Advance automation, observability, and data-driven measurement to improve control performance and reduce operational overhead.
- Align the framework with leading industry frameworks, including COBIT, NIST, and ISO 27001; conduct benchmarking and recommend strategic enhancements.
- Build partnerships with Technology leadership, Enterprise Risk, Compliance, Internal Audit, and enterprise governance organizations.
- Provide expertise on Technology governance, controls methodology, and control design, and support audit and regulatory responses through collaboration and practical problem solving.
Benefits
- Competitive compensation, benefits, and wellbeing programs.
- Flexible global resources and tools.
- Generous paid leaves, including paid volunteer time.
- Potential eligibility for an annual discretionary incentive award.
- Eligible employees may enroll in a 401(k) plan.
- Eligible employees may participate in company-sponsored medical, dental, vision, and basic life insurance plans.
- Eligible employees may receive paid time off, including vacation and sick time.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Director
