Vice President, Information security full stack Engineer

BNY Mellon • New York, NY

3d • $83,000 - $178,000

About The Position

At BNY, our culture allows us to run our company better and enables employees' growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world's investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators and champions of inclusion, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

We're seeking a future team member for the role of  Vice President, Information security full stack engineer to join our Cyber Technology team. This role is in New York, NY / Pittsburgh, PA.

Our Cyber Technology team builds and enhances secure applications that protect our enterprise IT environment. You'll develop internal platforms and tools used by cybersecurity teams to improve visibility, automate workflows, and strengthen controls across identity, endpoints, and network defenses. This role blends hands-on product delivery with secure engineering practices in a regulated financial services environment, with an emphasis on modern developer productivity and responsible use of AI-assisted tooling.

POSITION SUMMARY: The Vice President, Information Security plays a pivotal role in safeguarding BNY's information assets by developing, implementing, and managing security strategies. This position is crucial in upholding BNY's Principles of trust and integrity, ensuring that security measures align with the organization's Strategic Pillars. As an Individual Contributor, the Vice President is responsible for leveraging their expertise in the Information Security field to mitigate risks and enhance the protection of sensitive data across the company. This role supports the broader mission of BNY by maintaining a secure and resilient digital environment, fostering an organizational culture of security awareness.

Requirements

• Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent work experience.
• 6 to 10 years of experience in software engineering preferred with hands on delivery and a deep understanding of a programming language such as C# or Java or Python (or similar),  and delivering those solutions via production services.
• Experience developing APIs and integrations (REST/gRPC), including testing and basic observability (logs/metrics).
• Hands-on experience with React or Angular (SwiftUI experience is a plus).
• Familiarity with vulnerability management concepts and secure SDLC practices.
• Awareness of common application security risks (e.g., OWASP Top 10) and how to mitigate them.
• Practical understanding of core networking protocols and enterprise environments (e.g., TCP/UDP, SNMP, firewalls, proxies).
• Working knowledge of Windows and Linux administration fundamentals.
• Experience using Python scripting to automate workflows and integrate systems/tools.
• Familiarity with IAM concepts (SSO, MFA, RBAC, OAuth/OIDC) and general Zero Trust principles.
• Strong problem-solving and communication skills; able to deliver independently while collaborating in a team.
• Bachelor's degree in Information Security, Computer Science, or a related field
• Advanced certifications such as CISSP or CISM are preferred
• Typically 6-10 years of experience
• Strong analytical and problem-solving skills, with the ability to assess complex security challenges
• Excellent communication and collaboration capabilities to work effectively with various teams
• Proficiency in security tools and technologies, demonstrating expertise in the Information Security domain

Nice To Haves

• Experience building dashboards and reporting (security KPIs, trend reporting, operational metrics).
• Familiarity with cloud platforms and containerization (Docker/Kubernetes) and secure deployment practices.
• Experience building client-server applications for macOS and Windows.
• Experience using AI-assisted development tools (e.g., Windsurf, Cursor, or similar) to accelerate development, refactoring, testing, or code comprehension in a secure and responsible manner.

Responsibilities

• Build and maintain full-stack web applications and services using modern engineering patterns.
• Design and consume REST and gRPC APIs with an emphasis on reliability, security, and maintainability.
• Apply secure coding standards (e.g., input validation, authentication/authorization, dependency hygiene, secrets handling).
• Support vulnerability remediation efforts by addressing findings from scanning tools and security reviews.
• Create dashboards and reporting experiences that provide actionable insights (e.g., control health, risk posture, remediation progress).
• Automate recurring operational processes to improve efficiency, reduce human error, and increase auditability.
• Collaborate with IAM, network security, endpoint, and governance teams to align applications with security strategy and controls.
• Participate in security assessments and contribute to compliance efforts aligned with organizational standards.
• Independently diagnose and resolve issues across the stack (frontend, backend, CI/CD, environments).
• Contribute to documentation, runbooks, and operational best practices as needed.
• Practical application of DevOps/CI/CD and SDLC best practices including code reviews, testing, and release pipelines.
• Apply DevOps/CI/CD and SDLC best practices including code reviews, testing, and release pipelines.
• Leverage modern AI-assisted development tools to improve code quality, velocity, and maintainability where appropriate.
• Develop and implement comprehensive information security strategies by applying advanced knowledge of security protocols and risk management.
• Conduct regular security assessments and audits by utilizing industry-standard practices to identify vulnerabilities and recommend improvements.
• Collaborate with cross-functional teams to integrate security measures into business processes, ensuring seamless protection of digital assets.
• Monitor emerging security threats and trends, providing expert insights to proactively address potential risks.
• Lead incident response efforts by coordinating with relevant stakeholders to ensure timely resolution and mitigation of security breaches.
• Educate and train employees on security best practices, fostering a culture of security awareness across the organization.

Benefits

• BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy.
• We provide access to flexible global resources and tools for your life’s journey.
• Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 1-10 employees