Senior Associate, Infrastructure Services Analyst

BNY Mellon•New York, NY

13d•$59,000 - $124,000•Onsite

About The Position

We’re seeking a future team member for the role of Senior Associate, Infrastructure Services to join our Production Services Governance team. This role is located in NY/PGH/Lake Mary. In this role, you’ll make an impact in the following ways: Responsible for supporting the governance, oversight, and continuous improvement of BNY's Technology Enterprise Change Management (TECM) Framework /Secure Systems & Software Development Lifecycle (SSSDLC), Request for Change (RFC), Incident (INC), Availability (AVL), and Problem Management (PRB) processes. Partner across Engineering, Production Services, Risk, and Audit teams to strengthen control effectiveness, drive audit readiness, ensure regulatory sustainability, and advance strategic modernization initiatives through automation and AI-enabled capabilities.

Requirements

2-5 years of experience in technology, operations, risk, governance, audit, or control functions within Financial Services
Strong analytical, problem-solving, and stakeholder management skills
Ability to drive cross-functional initiatives and deliver results in a fast-paced environment
Excellent written and verbal communication skills, including executive-level reporting
Passion for continuous improvement, automation, AI, and process optimization
Experience working in regulated or complex enterprise environments

Nice To Haves

Experience in technology governance, SSSDLC, change management, production services, technology risk, or controls
Strong understanding of TECM/SSSDLC, Incident, Problem, and Change Management processes
Ability to partner across multiple stakeholders to drive governance and strategic outcomes
Experience supporting audit remediation, regulatory initiatives, control monitoring, and continuous improvement
Strong analytical, communication, and stakeholder management skills
Experience leveraging AI, automation, and data-driven insights to modernize governance and risk management

Responsibilities

Responsible for supporting the governance, oversight, and continuous improvement of BNY's Technology Enterprise Change Management (TECM) Framework /Secure Systems & Software Development Lifecycle (SSSDLC), Request for Change (RFC), Incident (INC), Availability (AVL), and Problem Management (PRB) processes
Partner across Engineering, Production Services, Risk, and Audit teams to strengthen control effectiveness, drive audit readiness, ensure regulatory sustainability, and advance strategic modernization initiatives through automation and AI-enabled capabilities
Champion the adoption of BNY's AI capabilities - including Digital Engineer, Windsurf, Eliza, and Microsoft Copilot - to transform day-to-day governance, risk management, policy oversight, and control BAU
Identify opportunities to embed AI throughout the Secure System & Software Development Lifecycle (SSSDLC), enabling teams to improve requirements quality, development efficiency, testing effectiveness, control compliance, and production resiliency
Drive the use of AI for governance activities including policy analysis, control monitoring, audit evidence collection, risk assessments, issue management, reporting, and regulatory preparedness
Leverage AI-assisted insights to proactively identify control gaps, emerging risks, recurring issues, and opportunities for process simplification and automation
Partner with Engineering and senior technology leaders to drive strategic governance forums that support enterprise decision-making and oversight
Support governance for the Technology & Cyber Resiliency Council, Technology & Cyber Resiliency Forum, Production Services Governance Forum, and Enterprise Software Delivery Council (ESDC)
Lead the development of the monthly Technology & Cyber Resiliency Newsletter
Maintain 30+ TECM/SSSDLC/RFC and 6 INC/AVL/PRB policy, standard, and procedure documents.
Ensure alignment and traceability across policies, standards, procedures, and associated controls.
Drive ongoing maturity of TECM/SSSDLC and INC/AVL/PRB Risk & Control Self-Assessments (RCSA)
Oversee monitoring and governance of 62 SSSDLC and 8 Vulnerability Management controls
Identify, analyze, and escalate control deviations requiring platform remediation
Coordinate remediation across high-priority audit findings impacting software delivery, testing, requirements management, and data governance
Perform control effectiveness reviews and monthly sampling to validate framework compliance and operational execution.
Advance automation and AI-enabled capabilities to reduce manual effort and improve scalability
Support development and execution of the TECM/SSSDLC and INC/AVL/PRB strategic roadmap
Assess current-state frameworks against industry standards, regulatory expectations, and emerging market practices
Identify opportunities to streamline processes, modernize controls, and leverage automation and AI
Manage intake, requirement refinement, and prioritization of ServiceNow enhancements supporting Change Management, Permit-to-Operate (PTO), Incident Management, Problem Management, Business Impact Management, Knowledge Management
Maintain a prioritized backlog aligned to business objectives and delivery capacity
Ensure user stories, requirements, acceptance criteria, and dependencies are clearly defined before development
Influence and collaborate across multiple Engineering stakeholder groups
Drive governance, transformation, and continuous improvement initiatives
Champion innovation, automation, and operational excellence