Security Architecture and Application Security Senior Manager

Location: New York

## Security Architecture and Application Security Senior Manager Apply:
Hybrid:
New York:
Full time:
Posted Today:
End Date:
December 31, 2026 (30+ days left to apply):
JR#
** Excited to grow your career?
** BBVA is a global company with more than 160 years of history that operates in more than 25 countries where we serve more than 80 million customers. We are more than 121,000 professionals working in multidisciplinary teams with profiles as diverse as financiers, legal experts, data scientists, developers, engineers and designers.#
** About the job:
**** Position Summary
** We are looking for an experienced Security Architect with strong Application Security expertise who can lead security across a portfolio of complex technology initiatives within BBVA CIB US.  This is a hands-on security leadership role combining
** security architecture, application security and project security management**. The successful candidate will work with engineering and business teams from early design through production, reviewing solution architectures, identifying security risks, defining security requirements and ensuring agreed controls are implemented.  The role requires someone who can
** manage multiple initiatives simultaneously**, prioritize security activities based on risk, and independently drive projects through the security lifecycle while partnering with Corporate Security Architecture, Engineering, Application Development, Infrastructure, Cloud, Risk and business stakeholders.  
** Key Responsibilities
*** Perform
** security architecture reviews and threat modeling
** for applications, APIs, cloud services, infrastructure and third-party solutions.
* Evaluate architecture patterns covering
** authentication and authorization, IAM, encryption, secrets/key management, APIs, network segmentation, data protection, cloud security and secure integration patterns
*** Validate that approved architecture and security controls have been implemented as designed before production deployment.
* ** Own the security workstream for multiple concurrent technology initiatives**, establishing security deliverables, dependencies, priorities and milestones and proactively driving them to completion.
* Manage a portfolio of security engagements simultaneously, prioritizing activities based on
** business criticality, architecture complexity, security risk and delivery timelines**.
* Identify security-related project risks and dependencies early, escalate blockers when necessary, and ensure security activities do not become a late-stage impediment to delivery.
* ** Participate in project governance
** meetings and provide security guidance to project teams.
* ** Review Security Models
** produced by Corporate Security Architecture.
* ** Assess proposed architectures
** for alignment with BBVA security standards and U.S. regulatory requirements.
* ** Provide delegated Security Architecture
** and Application Security support for local initiatives.
* ** Identify security gaps
** and recommend compensating controls where appropriate.
* ** Review initiatives
** that may fall outside the standard lifecycle process, including third-party platforms, trading venues, and standalone SaaS solutions.
* ** Validate that approved security controls
** are implemented as designed prior to production deployment.
* ** Serve as the primary security advisor
** for assigned projects.
* ** Collaborate with Corporate Security Architecture**, Enterprise Architecture, Technology Engineering, Application Development, Infrastructure, Risk, Compliance, and business stakeholders.  
** Qualifications and Experience**
* ** Bachelor's degree
** in Information Security, Computer Science, Information Technology, Engineering, or related field (or equivalent experience).
* ** 10+ years of experience
** in Information Security, Security Architecture, Application Security, Infrastructure Security, or Cybersecurity Engineering.
* Experience participating in technology projects and implementing security controls.
* Strong understanding of
** network security, cloud security, identity and access management, application security, and infrastructure security**.
* Experience performing security risk assessments and architecture reviews.
* Familiarity with financial services security requirements and regulatory expectations.
* Excellent written and verbal communication skills.
* Ability to influence cross-functional teams without direct authority.
* Experience in banking or financial services.
* Knowledge of cybersecurity and…