Endpoint Security Lead

BNY Mellon•Pittsburgh, PA

2d•Hybrid

About The Position

The Endpoint Security Lead is responsible for strategic direction, enterprise-wide coordination, and oversight of endpoint security capabilities across user endpoints and server assets, including physical and virtual environments. This role provides a unifying view of the endpoint security ecosystem, shapes policy and architectural direction, identifies gaps and emerging risks, and guides the long-term roadmap for tooling and capabilities across the enterprise.

Requirements

10-12 years of experience in cybersecurity or infrastructure with demonstrated depth and breadth in endpoint security concepts and enterprise tooling ecosystems.
Bachelor’s degree required, Master’s degree preferred
Ability to lead through influence and drive alignment across diverse technical and organizational stakeholders.
Strong understanding of security architecture, control frameworks, and strategic planning.
Excellent communication and synthesis skills, capable of producing executive-ready insights.

Responsibilities

Maintain a comprehensive, current-state understanding of endpoint security posture across workstations, laptops, and server assets in on‑premises and virtualized environments.
Serve as the central coordination point across technology, cybersecurity, risk, and platform teams responsible for endpoint and server security capabilities.
Provide integrated views and insights into coverage, maturity, and alignment across the endpoint security portfolio.
Contribute to the development and evolution of enterprise endpoint security standards and reference architectures spanning both user endpoints and server environments.
Partner with enterprise architecture and control teams to define target-state capabilities and consistent security expectations across heterogeneous endpoint platforms.
Ensure architectural direction reflects evolving threats, regulatory expectations, and enterprise technology strategy.
Identify material gaps, misalignments, or risk concentrations across endpoint and server security capabilities.
Coordinate stakeholders to assess issues, align on remediation approaches, and elevate risks appropriately through governance channels.
Support leadership and risk forums with clear articulation of endpoint security posture and priority concerns.
Own the endpoint security strategic roadmap, encompassing capability evolution, technology lifecycle planning, and portfolio rationalization.
Guide decisions related to tool selection, capability introduction, and de-duplication across endpoint and server security platforms.
Influence investment planning and sequencing to ensure endpoint security capabilities advance cohesively and at enterprise scale.