Director, CYBER THREAT Simulation – Global Lead , NY, Posted

New York, NY, United States

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting‑edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

We’re seeking a future team member for the role of CYBER THREAT SIMULATION – Global Lead to join our Cybersecurity Platform team. This role is in New York City, NY. In this position, you will lead and develop the Cyber Threat Simulation Service – providing day‑to‑day direction, coaching, and performance feedback – to deliver high‑impact exercises and reporting.

The Cyber Threat Simulation team delivers best‑in‑class cyber simulation exercises to facilitate internal training and to clients as required. In addition, we provide realistic phishing simulations and targeted spear‑phishing campaigns. This includes planning, executing and preparing reports for BNY’s Cyber Threat Simulation program. The service plays a critical part in strengthening the firm’s human defense layer by delivering realistic simulations and data‑driven insights that reduce user susceptibility and improve cyber awareness.

The role combines operational execution, scenario design, analytics, automation, and stakeholder engagement, and works closely across Cyber Security to include but not limited to: SOC, Threat Intelligence, Learning, and Communications teams.

In this role, you’ll make an impact in the following ways:

• Lead facilitation of cyber security simulation exercises for audiences that may include senior management and executives; sets the tone, pace, and engagement model for the session, while coaching team members on facilitation techniques.
• Serve as the people leader for simulation development when not facilitating, including assigning work, reviewing deliverables, and driving scenario conception, design, and continuous improvement of exercise content and delivery.
• Lead and/or assist in the planning and preparation for exercises in conjunction with participating lines of business to determine requirements, manage stakeholders, tailor exercises as required, and coordinate team resourcing and timelines.
• Lead post‑exercise analysis to translate simulation findings into actionable lessons learned/observations with line of business participants; accountable for producing and quality‑reviewing debrief materials and reports, and for providing coaching feedback to team members to improve future delivery.
• Manage and develop team members through hiring/onboarding support, goal setting, regular 1:1s, performance feedback, and training plans to build a strong facilitation and analysis bench.
• Lead and/or assist in the design, build, and execution of both quarterly global phishing tests for employees, contractors, and consultants and targeted spear‑phishing simulations for high‑risk populations based on role, access, threat intelligence, and prior susceptibility.
• Execute and maintain the phishing testing consequence model, including instant education, remediation training workflows, repeat‑offender tracking, and escalation processes.
• Collaborate across Cybersecurity Operations to develop simulations informed by real‑world threat intelligence, emerging attacker techniques, and business‑relevant events.
• Support automation and tooling enhancements for simulation and exercise development, campaign execution, consequence model execution, reporting, etc.
• Analyze results to identify risk patterns, high‑risk populations, and opportunities for targeted intervention.
• Partners with Cyber Awareness, Learning, and Communications teams to integrate phishing testing outcomes into broader awareness initiatives.
• Maintain…