Vice President, Information Security- Full Stack
About The Position
The Vice President, Information Security is an individual-contributor role responsible for safeguarding BNY’s information assets by developing, implementing, and managing security strategies. The role applies information-security expertise to mitigate risk, protect sensitive data, maintain a secure and resilient digital environment, and foster security awareness across the organization. The posting also describes full-stack engineering responsibilities, including leading the technical design, development, and implementation of secure, scalable application systems using Java, Spring Boot, Angular, and Oracle technologies. The position promotes test-driven development, code quality, code reviews, and engineering best practices; guides delivery through the development lifecycle, including controlled deployments, production support, and continuous improvement; collaborates with engineers, business users, project managers, and cross-functional partners; and mentors team members. The information-security responsibilities include developing security strategies, conducting assessments and audits, integrating security measures into business processes, monitoring emerging threats, leading incident response, and educating employees on security best practices. BNY offers competitive compensation, benefits, and wellbeing programs, including generous paid leaves and paid volunteer time. Eligible employees may enroll in a 401(k) plan and participate in company-sponsored medical, dental, vision, and basic life insurance plans. Other paid time off benefits may be available depending on the position.
Requirements
- At least 6 years of experience developing enterprise web applications using Java, Spring, Spring Boot, and Angular.
- Strong proficiency in Core Java, J2EE, RESTful web services, and full-stack application development.
- Hands-on experience with Oracle or comparable relational databases and SQL.
- Experience with JUnit, Mockito, test-driven development, Git, and code-review practices.
- Experience deploying and supporting applications on platforms such as Apache, WebSphere, or Tomcat.
- Strong understanding of the software development lifecycle and Agile delivery practices.
- Ability to lead technical delivery, collaborate across functions, and mentor engineers.
- Bachelor’s degree in Information Security, Computer Science, or a related field.
- Typically 6–10 years of experience.
- Strong analytical and problem-solving skills for assessing complex security challenges.
- Excellent communication and collaboration capabilities.
- Proficiency in information-security tools and technologies.
Nice To Haves
- Advanced certifications such as CISSP or CISM.
- Experience with MyBatis, Hazelcast, Kafka, and Jira.
- Knowledge of JavaScript, HTML, CSS, AngularJS, jQuery, and modern Angular versions.
- Experience with MySQL or Sybase databases.
- Familiarity with both Agile and Waterfall delivery environments.
Responsibilities
- Lead the technical design, development, and implementation of secure, scalable application systems.
- Build and enhance full-stack solutions using Java, Spring Boot, Angular, and Oracle technologies.
- Promote test-driven development, code quality, code reviews, and engineering best practices.
- Guide software delivery across the development lifecycle, including controlled deployments, production support, and continuous improvement.
- Collaborate with engineers, business users, project managers, and cross-functional partners to deliver solutions.
- Mentor team members, promote shared accountability, and elevate engineering standards.
- Develop and implement comprehensive information-security strategies using security protocols and risk-management practices.
- Conduct security assessments and audits to identify vulnerabilities and recommend improvements.
- Integrate security measures into business processes in collaboration with cross-functional teams.
- Monitor emerging security threats and trends and provide insights to address risks proactively.
- Lead incident-response efforts and coordinate stakeholders to resolve and mitigate security breaches.
- Educate and train employees on security best practices to foster security awareness.
Benefits
- Competitive compensation and wellbeing programs.
- Generous paid leaves, including paid volunteer time.
- Eligible employees may enroll in a 401(k) plan.
- Eligible employees may participate in company-sponsored medical, dental, vision, and basic life insurance plans.
- Other paid time off benefits, such as vacation and sick time, may be available depending on the position.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
