Senior Vice President, Information Security

BNY • Washington, DC

14h • $120,000 - $253,000 • Onsite

About The Position

BNY is seeking a Senior Information Compliance Specialist to join its Information Security Division – Business Information Security Office in Washington, DC. The role focuses on information security compliance, risk management, FedRAMP High requirements, and Authority to Operate (ATO) processes. The specialist will maintain security documentation, assess control effectiveness, coordinate audit evidence and responses, and work with technical and non-technical colleagues to address issues and communicate risk. The position requires deep knowledge of FISMA, NIST publications, and the Risk Management Framework (RMF).

Requirements

• Bachelor's degree in computer science or a related discipline, or equivalent work experience.
• At least 10 years of experience in information security or related technology.
• Deep understanding of FISMA requirements and NIST special publications 800-53, 800-37, and 800-171.
• Excellent decision-making skills, moral and ethical standards, teamwork and collaboration, multitasking, and attention to detail.
• Strong organization and process management skills.
• Strong knowledge of the Risk Management Framework (RMF).
• Proficiency in M365 applications.

Nice To Haves

• Advanced degree preferred.
• Experience in the securities or financial services industry is a plus.
• Experience with federal compliance preferred.
• Demonstrated experience managing or executing successful ATO processes preferred.
• CISM, CISSP, or CISA security certification preferred.

Responsibilities

• Develop and maintain comprehensive security documentation required by FedRAMP, conducting frequent reviews and updates to ensure accuracy.
• Ensure internal controls related to information risk management are effective and review continued compliance with FedRAMP High requirements.
• Lead Authority to Operate (ATO) processes for information systems.
• Perform security control assessments, establish metrics and measures to assess control effectiveness, and recommend areas for improvement.
• Serve as the primary point of contact for inquiries related to audits, security documentation, and control compliance.
• Collaborate with technical and non-technical team members to address issues and collect relevant technical risk information.
• Provide briefings on ATO status, audit findings and remediations, and current control gaps.
• Help reduce the likelihood of reputational and regulatory consequences arising from non-compliance with information risk management policies, standards, and applicable local procedures.
• Identify and assess potential threats and vulnerabilities.
• Prepare and coordinate audit evidence, including responding to audit findings.

Benefits

• Competitive compensation and benefits, including wellbeing programs.
• Flexible global resources and tools.
• Paid leaves, including paid volunteer time.
• 401(k) plan, subject to eligibility and applicable plan terms.
• Company-sponsored medical, dental, vision, and basic life insurance plans, subject to eligibility.
• Other benefits, including vacation and sick time, depending on the position offered.
• Potential eligibility for an annual discretionary incentive award.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior