Vice President, Information Security

BNY Mellon•Nashville, TN

1d•$83,000 - $178,000

About The Position

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide. Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary. At BNY, our culture speaks for itself, check out the latest BNY news at BNY Newsroom [https://www.bny.com/corporate/global/en/about-us/newsroom.html] & BNY LinkedIn [https://www.linkedin.com/company/bnyglobal/posts/?feedView=all] Here’s a few of our recent awards: America’s Most Innovative Companies, Fortune, 2025 World’s Most Admired Companies, Fortune 2025 “Most Just Companies”, Just Capital and CNBC, 2025

Requirements

Minimum 4-6 years of hands-on experience in Identity and Access Management, with strong experience in mainframe security administration.
Demonstrated experience working with ACF2 and/or RACF for user access provisioning, entitlement management, and security administration.
Strong understanding of mainframe security concepts, including roles, groups, resource rules, logon IDs, permissions, and segregation of duties considerations.
Experience supporting access request fulfillment, approvals, certifications, and audit remediation in a controlled environment.
Familiarity with IAM governance processes and platforms, including integration of mainframe applications with enterprise IAM solutions such as SailPoint.
Participate in a scheduled on-call support rotation, including after-hours and weekend coverage, to respond to access-related incidents, production issues, and critical implementation activities, ensuring timely resolution and continuity of IAM operations.
Experience supporting joiner, mover, leaver processes and access lifecycle management.
Ability to analyze access issues, troubleshoot provisioning problems, and recommend practical, risk-aligned solutions.
Knowledge of risk, controls, compliance, and audit support within an IAM or information security environment.
Experience with incident, problem, and change management processes.
Proficiency with MS Office Suite, Jira, and Confluence.
Strong critical thinking, problem-solving, and organizational skills.
Excellent oral and written communication skills, including the ability to explain technical access and security concepts clearly to both technical and non-technical stakeholders.
Ability to collaborate effectively across distributed teams and influence stakeholders in support of secure, efficient service delivery.
Strong commitment to quality, accuracy, and operational excellence.

Responsibilities

Administer and support mainframe access management processes with a focus on ACF2 and RACF security environments.
Provision, modify, and revoke user access on the mainframe in accordance with approved requests, policy requirements, and operational standards.
Support the onboarding of mainframe applications into IAM governance processes, including access requests, approvals, certifications, and audit controls.
Maintain and update ACF2/RACF security rules, groups, profiles, roles, and permissions to align with business and technical requirements.
Partner with application owners, system administrators, and business stakeholders to determine appropriate access models and implement required security changes.
Execute and support joiner, mover, and leaver access activities for mainframe-connected applications and platforms.
Monitor and manage access-related queues, service requests, escalations, and remediation items to ensure timely resolution and adherence to service level expectations.
Support access certification, entitlement review, and audit remediation activities for mainframe platforms and associated applications.
Investigate and resolve mainframe access issues, provisioning exceptions, and control gaps, coordinating with engineering and support teams as needed.
Contribute to the implementation and enhancement of role-based access controls and standardized provisioning models for mainframe environments.
Support compliance initiatives by preparing evidence, responding to audit inquiries, and assisting with control execution and documentation.
Develop and maintain operational procedures, process documentation, workflow maps, and control-related materials for mainframe IAM activities.
Apply incident, problem, and change management best practices in support of stable and controlled IAM operations.
Promote security policy adherence, strong governance, and access management best practices across supported environments.
Partner with IAM engineering and governance teams to support automation, process improvements, and integration of mainframe access processes with broader IAM tooling where applicable.