Director, Senior Cloud Security Architect

BNY Mellon•New York, NY

6d•Onsite

About The Position

The Senior Cloud and AI Security Architect is responsible for defining and driving the enterprise cloud security architecture strategy while enabling the use of AI to enhance cloud security capabilities. This role combines deep expertise in cloud platforms, cybersecurity architecture, and security engineering with strong knowledge of AI-driven technologies and their practical application in security. The role holder leads the design of secure, scalable, and resilient cloud architectures, establishes security standards and reference patterns, and acts as a strategic advisor on how AI can be leveraged to improve cloud security posture, automate controls, strengthen threat detection, and increase operational efficiency. In addition, the role will also support the development and execution of Cloud Security Strategy and Governance. This role is in New York, NY or Pittsburgh, PA.

Requirements

10+ years of cloud security architecture, enterprise security architecture, or cybersecurity engineering.
7+ years of direct experience designing and securing cloud environments in one or more major cloud service providers such as Azure, AWS, GCP or OCI.
Deep understanding of cloud security principles including IAM, zero trust, network segmentation, encryption, key management, logging, monitoring, and workload protection.
Strong understanding of AI and machine learning concepts, with practical experience applying AI to cybersecurity or security operations use cases.
Experience with security automation, orchestration, analytics, and AI-driven security tooling.
Ability to translate complex technical concepts into clear architectural direction for technical and non-technical stakeholders.
Excellent stakeholder management, communication, and influencing skills.
Proven ability to lead cross-functional initiatives in complex enterprise environments.
Experience working with CSPM/CNAPP tools such as Wiz
Experience with cloud-native posture and policy services
Experience with container and Kubernetes security, API security, and CI/CD security architecture.
Bachelor's degree in Information Security, Computer Science, or a related field
Typically 6-10 years of experience
Strong analytical and problem-solving skills, with the ability to assess complex security challenges
Excellent communication and collaboration capabilities to work effectively with various teams
Proficiency in security tools and technologies, demonstrating expertise in the Information Security domain

Nice To Haves

Familiarity with NIST 800.53, CSF, CIS Benchmarks, CSA CCM and OWASP guidance.
Experience with cloud security tooling such as CSPM, CNAPP, DSPM, CWPP, or SIEM integrations.
Relevant certifications such as: CISSP, CCSP, AWS Security Specialty, Azure Security Engineer Associate, Google Professional Cloud Security Engineer
Master's degree in computer science, engineering, cybersecurity, or related discipline.
Advanced certifications such as CISSP or CISM are preferred

Responsibilities

Define and lead the cloud security architecture strategy across enterprise cloud platforms and services.
Develop and maintain cloud security reference architectures, design patterns, standards, and guardrails.
Act as an AI enabler for cloud security by identifying, assessing, and promoting AI use cases that improve security outcomes.
Drive the adoption of AI-driven capabilities for threat detection, risk analysis, automation, incident response, and security operations.
Partner with cloud engineering, platform, data, AI, and cybersecurity teams to integrate AI securely and effectively into cloud security processes and tooling.
Evaluate emerging cloud security and AI technologies and recommend innovations that enhance resilience, efficiency, and risk management.
Advise senior leadership and key stakeholders on cloud security risks, architecture decisions, and strategic technology direction.
Support security transformation initiatives by embedding security-by-design and automation-by-design principles into cloud adoption programs.
Define secure cloud design principles and reference patterns.
Map architecture decisions to NIST SP 800-53 controls and related enterprise requirements.
Work with platform operational teams, DevOps, and application teams to operationalize security architecture decisions.
Promote implementation through reusable patterns, automation, and policy enforcement.
Review high-risk cloud initiatives, balance and document residual risk ums, audits, and regulatory reviews with defensible architecture rationale.
Support the development and execution of the enterprise Cloud Security Strategy.
Help define cloud security standards, governance processes, and architecture review criteria.
Partner with risk, compliance, and audit stakeholders to ensure cloud security architecture remains aligned to enterprise obligations and regulatory expectations.
Define the target-state posture management architecture across third-party and cloud-native capabilities.
Establish standards for preventing and detecting cloud misconfigurations.
Act as an AI enabler by identifying opportunities to apply AI to strengthen cloud security outcomes.
Drive adoption of AI capabilities to improve threat detection, posture analysis, risk prioritization, and security operations efficiency.
Help streamline cloud security tooling, processes, and workflows through intelligent automation and AI-driven insights.
Promote practical and responsible use of AI as a force multiplier for cloud security effectiveness, scalability, and operational maturity.