Vice President, Information Security

Job-:
Information Security

Location:

New York, NY, United States;
Pittsburgh, PA, United States;
Lake Mary, FL, United States

Schedule:

Full time, Day Posted:
Base Salary Min: 83000

Base Salary Max: 209000

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary. We’re seeking a Vice President, Cloud Security Engineer to join our Cloud Security Team in Lake New York,  this role, you’ll make an impact in the following ways:

Support implementation and continuous improvement of cloud security controls across infrastructure, platform, and application environments in AWS, Azure, or GCP.Support enablement of AI for cloud security by promoting AI use cases that improve security outcomes.

Drive security integration into CI/CD pipelines and infrastructure delivery processes to ensure secure-by-design and secure-by-default deployment models.

Support implementation efforts for container, Kubernetes, API, and cloud-native workload security controls.

Drive the operational maturity of Cloud Security Posture Management (CSPM) capabilities to identify misconfigurations, policy violations, excessive permissions, exposed assets, and control drift.

Partner with engineering and cyber teams to optimize Wiz and similar CSPM/CNAPP platforms, including workflow integration, prioritization, remediation support, and reporting.

Implement policy-as-code, automated guardrails, and infrastructure-as-code patterns to improve control consistency and reduce manual processes.

Partner with cloud architects and governance stakeholders to improve standards adoption, exception handling, and control coverage.

Maintain and improve documentation for cloud security standards, design patterns, engineering procedures, and operating guidance.

To be successful in this role, we’re seeking the following:6-10 years of experience in cloud security engineering, security engineering, Dev Sec Ops , infrastructure security, or a related technical security role.

Proven experience as an AI enabler for cloud security by identifying, assessing, and promoting AI use cases.

Experience with security automation, orchestration, analytics, and AI-driven security tooling.

Hands-on experience working with and securing workloads in AWS, Azure, or GCP.Working knowledge of cloud security principles across IAM, networking, encryption, logging, secrets management, workload protection, and secure service configuration.

Experience implementing security controls for cloud-native services and modern application environments.

Familiarity with Cloud Security Posture Management (CSPM) concepts and tools such as Wiz.

Experience with cloud-native policy and posture tools, including Azure Policy and Microsoft Defender for Cloud.

Experience with Infrastructure as Code and automation using tools such as Terraform.

Exposure to container and Kubernetes security, API security, or vulnerability management is a plus.

Strong problem-solving, collaboration, and technical communication skills.

Bachelor’s degree in computer science, engineering, cybersecurity, or related discipline, or equivalent practical experience.

Familiarity with CIS Benchmarks, CSA CCM, OWASP,…