Senior Vice President, Senior Cloud Security Engineer

BNY • New York, NY

1d

About The Position

BNY is seeking a Senior Vice President, Cloud Security Engineer to lead implementation and ongoing improvement of security controls across cloud platforms and cloud-native services, while supporting cloud security strategy and governance. The role combines hands-on cloud security engineering with knowledge of AI-driven technologies and their practical application in cybersecurity. It advances secure cloud capabilities through technical leadership, posture management, and partnership with engineering, architecture, DevSecOps, IAM, and cyber teams. The position is based in New York, NY or Pittsburgh, PA.

The successful candidate will help strengthen enterprise cloud security across public-cloud and cloud-native environments. They will translate security requirements into practical technical controls, repeatable engineering patterns, and measurable outcomes; support secure design standards and control adoption; and contribute to governance, risk reporting, audit, and regulatory activities. The role also promotes responsible use of AI and automation to improve threat detection, risk analysis, incident response, security operations, and operational efficiency.

The position’s success is measured by consistent and effective cloud controls at scale, improved integration of security into engineering workflows, actionable and remediated posture findings, stronger alignment with NIST SP 800-53 and enterprise standards, and clearer technical evidence and remediation transparency for governance and audit stakeholders.

The role offers a base salary expected to be between $83,000 and $209,000 per year at commencement. Actual salary is determined individually based on factors including experience and market location. Total compensation may also include commissions, discretionary bonuses, incentive packages, and company-sponsored benefits. BNY describes its benefits and wellbeing programs as competitive and mentions generous paid leaves, including paid volunteer time. The position is at-will.

Requirements

• 6–10 years of experience in cloud security engineering, security engineering, DevSecOps, infrastructure security, or a related security engineering role.
• Strong hands-on experience securing workloads and services in AWS, Azure, or GCP.
• Strong knowledge of cloud security principles covering IAM, networking, encryption, secrets management, logging, workload protection, resilience, and secure service consumption.
• Experience with security automation, orchestration, analytics, and AI-driven security tooling.
• Experience implementing cloud security controls at scale in enterprise or regulated environments.
• Strong familiarity with NIST SP 800-53, MCSB, and related control concepts, particularly Access Control (AC), Audit and Accountability (AU), Configuration Management (CM), Identification and Authentication (IA), Incident Response (IR), Risk Assessment (RA), System and Communications Protection (SC), and System and Information Integrity (SI).
• Strong understanding of CSPM concepts, including continuous compliance monitoring, misconfiguration detection, exposure analysis, and governance workflows.
• Experience with CSPM/CNAPP tools such as Wiz, Prisma Cloud, Orca, Lacework, or similar platforms.
• Experience with cloud-native policy and posture tools such as AWS Config, AWS Security Hub, AWS Organizations SCPs, Azure Policy, Microsoft Defender for Cloud, GCP Organization Policy, or Google Security Command Center.
• Experience developing or supporting policy-as-code and automated guardrails using OPA/Rego or equivalent policy frameworks.
• Strong experience with Infrastructure as Code and automation using Terraform, CloudFormation, ARM, Bicep, Python, or similar tools.
• Experience with container and Kubernetes security, API security, vulnerability management, and cloud-native control implementation.
• Experience supporting or contributing to cloud security strategy, governance processes, standards, exception handling, remediation tracking, and risk reporting.
• Strong technical judgment, problem-solving ability, and cross-functional collaboration skills.
• Strong written and verbal communication skills, including the ability to explain technical controls in business and risk terms.
• Bachelor’s degree in computer science, engineering, cybersecurity, or a related discipline, or equivalent practical experience.
• Ability to work fluently in an enterprise setting with KQL, Wiz, Splunk, Azure Policies, Bash, PowerShell, gcloud, Terraform, Log Analytics, Microsoft Sentinel, and GitLab development tools.

Nice To Haves

• Experience in a regulated industry such as financial services.
• Familiarity with CIS Benchmarks, CSA CCM, OWASP, or NIST CSF.
• Experience supporting remediation workflows tied to cloud security findings.
• Exposure to architecture reviews, risk assessments, or cloud governance processes.
• Relevant certifications such as AWS Security Specialty, Azure Security Engineer Associate, Google Professional Cloud Security Engineer, or CCSP.

Responsibilities

• Lead the engineering, implementation, and continuous improvement of cloud security controls for identity and access management, network security, encryption, key management, secrets management, logging, monitoring, and workload protection across AWS, Azure, or GCP.
• Identify, assess, and promote AI use cases and capabilities that improve cloud security outcomes, including threat detection, posture analysis, risk prioritization, incident response, and security operations.
• Translate security and control requirements into repeatable engineering solutions, implementation standards, and secure design patterns.
• Design and implement technical controls aligned with NIST SP 800-53 and related enterprise security requirements.
• Lead implementation of container, Kubernetes, API, and cloud-native workload security controls.
• Drive operational maturity of Cloud Security Posture Management (CSPM), including identification and prioritization of misconfigurations, policy violations, excessive permissions, exposed assets, and control drift.
• Partner with engineering and cyber teams to optimize Wiz and similar CSPM/CNAPP platforms, including workflow integration, prioritization, remediation support, and reporting.
• Design and strengthen use of cloud-native posture and policy services, including AWS Config, AWS Security Hub, AWS Organizations SCPs, Azure Policy, Microsoft Defender for Cloud, GCP Organization Policy, and Google Security Command Center.
• Define and implement policy-as-code, automated guardrails, and infrastructure-as-code patterns to improve control consistency and reduce manual work.
• Provide senior technical guidance to cloud engineers, DevSecOps practitioners, and application teams on secure cloud implementation practices.
• Partner with cloud architects, governance stakeholders, platform teams, DevOps, and application teams to improve standards adoption, exception handling, control coverage, and integration of security into engineering workflows.
• Help define cloud security metrics, remediation priorities, and technical reporting that support governance and risk management objectives.
• Contribute to audits, regulatory reviews, and control reviews by explaining technical implementations, evidence, and remediation status.
• Maintain and improve cloud security standards, design patterns, engineering procedures, and operating guidance.
• Support review of high-risk cloud initiatives and document residual risks, exceptions, and compensating controls.
• Support governance forums, audits, and regulatory reviews with defensible engineering rationale; balance security, resilience, cost, and engineering usability.
• Identify, prioritize, and help remediate control gaps and cloud security findings.
• Support cloud security strategy and governance through technical leadership, control implementation, reporting inputs, remediation governance, and security maturity efforts.
• Promote practical and responsible use of AI to improve cloud security effectiveness, scalability, and operational maturity.

Benefits

• Competitive compensation and benefits
• Wellbeing programs
• Flexible global resources and tools
• Generous paid leaves
• Paid volunteer time
• Potential commission earnings, discretionary bonuses, and short- and long-term incentive packages, depending on the position
• Company-sponsored benefit programs

What This Job Offers

• Job Type: Full-time
• Career Level: Senior