Vice President, Cyber Exercises & Threat Simulation

BNY Mellon • New York, NY

12d • $83,000 - $209,000

About The Position

BNY is seeking a Vice President, Cyber Exercises & Threat Simulation to join its global Cyber Threat Simulation team in New York, NY. This is an individual contributor position with no direct reports, reporting to the Head of Cyber Threat Simulations. The role helps BNY prepare for consequential cyber incidents by turning real-world threats into realistic exercises that strengthen crisis decision-making, assess response arrangements, and improve cyber resilience for BNY and its clients.

Responsibilities span cyber war games, tabletop exercises, and the phishing program, with the mix shaped by the employee’s skills and experience and the global team’s needs. The position owns assigned activities and contributes to larger exercises, working across regions with Cybersecurity, business and technology teams, Enterprise Resilience, and Communications. It offers the opportunity to develop scenarios, engage technical and business leaders, and turn exercise findings into practical improvements. The role also helps evolve the team’s use of AI capabilities and automation to improve simulation realism, analysis, and delivery.

Requirements

• Experience delivering cyber exercises, phishing simulations, incident response, operational resilience, or closely related work, with evidence of translating complex risks into realistic scenarios or practical improvements.
• Ability to plan and coordinate activities from initial requirements through delivery, manage stakeholders, and balance competing priorities.
• Understanding of cyber threats, incident response, phishing, and social engineering, and how cyber incidents can affect business services and clients.
• Strong communication and facilitation skills, including engaging technical and business audiences, asking effective questions, and producing clear briefings and reports.
• Ability to analyze data and observations, verify the evidence behind findings, and develop actionable recommendations.
• Practical ability to use AI tools through effective prompting, iterative refinement, and validation, with sound judgment about accuracy, confidentiality, and human oversight.
• Bachelor’s degree in Cybersecurity, Information Security, Information Technology, or a related discipline, or equivalent practical experience.

Nice To Haves

• Experience designing and facilitating cyber war games or tabletop exercises, particularly with senior leaders or external clients.
• Experience delivering phishing campaigns and using simulation platforms or security awareness tools.
• Experience working across regions or within a complex, regulated organization, with an understanding of financial services or operational resilience.
• Experience applying generative AI, automation, dashboards, or analytics to improve cybersecurity workflows, with examples of benefits achieved and how outputs were validated.
• Familiarity with structured exercise planning and evaluation methods.
• Relevant security or risk certifications, such as CISSP, GIAC, or SANS, are welcome but not required.
• Relevant experience from financial services, consulting, other industries, or military and government roles.

Responsibilities

• Own assigned war games and tabletop exercises from objective setting and stakeholder planning through scenario development, delivery, and debrief.
• Create realistic scenarios, injects, participant briefings, and facilitator materials informed by threat intelligence, emerging attacker techniques, business dependencies, and AI-enabled threats.
• Facilitate exercises with technical and business participants, drawing out assumptions, decision challenges, and opportunities to improve response and recovery.
• Support larger enterprise, executive, and client exercises through planning, stakeholder coordination, scenario development, and observation capture.
• Analyze exercise observations and produce concise debriefs and reports with actionable recommendations; work with stakeholders to agree improvement actions and support follow-up where required.
• Design, build, and execute quarterly global phishing tests for BNY employees, contractors, and consultants, as well as targeted spear phishing simulations informed by role, access, threat intelligence, and prior susceptibility.
• Operate phishing education and remediation workflows, including repeat susceptibility tracking and escalation, and partner with Cyber Awareness, Learning, and Communications to target support.
• Analyze phishing results and exercise findings to identify risk patterns, communicate insights, and recommend practical interventions for technical and non-technical audiences.
• Pilot AI tools and automation to develop scenario variants and simulated stakeholder dialogue, streamline campaign delivery, and accelerate analysis and reporting; validate outputs, protect sensitive information, and measure quality and efficiency improvements.
• Maintain exercise and campaign documentation, operating procedures, and testing standards; share effective approaches across the global team.

Benefits

• Competitive compensation, benefits, and wellbeing programs.
• Flexible global resources and tools.
• Generous paid leaves, including paid volunteer time.
• Eligible employees may enroll in a 401(k) plan.
• Eligible employees may participate in company-sponsored medical, dental, vision, and basic life insurance plans for themselves and eligible dependents.
• Eligible employees may receive other paid time off benefits, such as vacation and sick time.
• Eligible employees may be eligible for an annual discretionary incentive award.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager