Director, Cybersecurity Regulatory Strategy & Engagement

Archer; New York (NY); On-site; USD 116,000 - 246,000; Full time

Job summary

Archer partners with BNY to recruit a Director, Cybersecurity Regulatory Engagement (1LOD) for NYC. The role leads regulatory engagement activities, translating expectations into actionable 1LOD controls and coordinating with regulators and internal partners.

You will manage exams, RFIs, and inquiries, prepare executive briefings, and drive timely, compliant responses. The ideal candidate has 12+ years in cybersecurity risk, strong regulatory experience, and executive communication skills.

Qualifications

• 12+ years of experience in cybersecurity, technology risk, governance, audit, controls or related technology disciplines.
• Extensive experience in regulatory engagements, risk management, audit, or compliance within a large, complex, and highly regulated organization.
• Proven track record leading regulatory exams, supervisory interactions, or other types of regulatory engagements.
• Experience operating in a First Line of Defense (1LOD) role.

Responsibilities

• Execute end-to-end cybersecurity regulatory engagements, including regulatory exams, supervisory meetings, remediation activities, and RFIs.
• Coordinate globally with process owners, control owners, and subject matter experts to deliver regulator-ready responses.
• Review, challenge, and approve key regulatory responses to ensure alignment with the firm’s posture and risk appetite.
• Prepare executive-level briefings and talking points for senior management and boards.
• Maintain accurate regulatory engagement tracking, documentation, and artifacts per CGRC standards.

Skills

Regulatory engagement

Cybersecurity governance

Executive communication

Regulatory exams

Job description

Archer partners with BNY to recruit a Director, Cybersecurity Regulatory Engagement (1LOD) for NYC. The role leads regulatory engagement activities, translating expectations into actionable 1LOD controls and coordinating with regulators and internal partners.

You will manage exams, RFIs, and inquiries, prepare executive briefings, and drive timely, compliant responses. The ideal candidate has 12+ years in cybersecurity risk, strong regulatory experience, and executive communication skills.