Job Description
We’re seeking a future team member for the role of Cryptography Platform and Services Technologist Lead to join our Cybersecurity Organization team. This role is located in NYC/NJ, Lake Mary, Florida, or Pittsburgh PA.
Key Responsibilities
- Lead BNY Key Management solutions across BNY Enterprise.
- Design, implement, and support Cryptography Key Management solution across BNY Enterprise.
- Design, implement, and support Cryptography Asset Management solution across BNY Enterprise.
- Respond to requests from LOB, Internal Audit, and Federal Regulators on BNY Key Management ecosystem.
- Train enterprise on PKI platforms, HSMs, and Key Management systems.
- Collaborate with compliance teams to align solutions with regulatory frameworks such as GDPR, DORA, NIST, and ISO 27001.
Qualifications
- Master’s in information security or related fields.
- 5–10+ years of work experience in cyber security, architecture design, Key Management and PKI solutions.
- Experience with Key Management (HSM, Thales Products (Ciphertrust, DPOD), Oracle Key Vault).
- Knowledge of HSM, RSASecurID, cryptographic algorithms (RSA, AES), protocols (SSL/TLS, IPSec, SSH, Kerberos).
- Experience with security policies, disaster recovery, change management, risk assessment, threat modeling.
- Experience with security within Cloud Services (AWS, Azure), Cisco routers and switches, IoT.
- Knowledge of ISO/IEC 27001, PCI DSS, X.509, IEEE 802.1X, FISMA, NIST, MITRE, COBIT, ITIL.
- Ability to train enterprise on HSMs and Key Management systems.
- Knowledge of cryptographic algorithms and principles, including digital signatures and blockchain systems.
- Familiarity with compliance frameworks such as GDPR, DORA, NIST, and ISO 27001.
- Experience with Key Management systems, HSMs, and PKI Platforms.
- Experience in global Financial Services security ecosystem is preferred.
- Hands‑on experience with Thales HSM, Thales SAAS Products, Thales Ciphertrust, Oracle key management products.
- Strong communication skills for presenting Key Management concepts to diverse technical and non‑technical audiences.
- Certifications: CISSP, Cisco Certified Entry Network Technician CCENT, Certified Technical Trainer CTT, etc.
- Experience with Cybersecurity policies, cryptographic algorithms, PKI, HSM, and key management systems.
Benefits & EEO Statement
BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay‑for‑performance philosophy. BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans. Details about benefits such as 401(k) plan, medical, dental, vision, basic life insurance, paid time off, vacation, sick time, and discretionary incentive award are available upon offer.