Director, Technology Audit & Cyber Risk

BNY Mellon; New York (NY); On-site; USD 150,000 - 190,000; Full time

Job summary

BNY Mellon seeks a Director to lead IT audit across Technology Infrastructure within Internal Audit. The role is based in New York, NY or Lake Mary, FL, and will define risk assessments, the annual audit plan, and audit scope while overseeing audits to meet professional standards.

The successful candidate will manage a global team, collaborate with senior stakeholders, and strengthen control frameworks across applications, governance, architecture, networks, data management, and lifecycle

Qualifications

• 8+ years of IT auditing and cybersecurity experience.
• Proven experience conducting IT audits.
• Strong knowledge of IT systems, networks, and information systems management.
• Certifications such as CISA, CISSP, or CISM desirable.
• Excellent analytical and communication skills.

Responsibilities

• Define annual auditable entity risk assessments and the audit plan.
• Set audit scope and testing; oversee audit execution per standards.
• Identify risk-based gaps in technology systems and processes.
• Lead discussions with management and ensure remedial actions.
• Manage staff performance and development; mentor junior auditors.
• Maintain relationships with key technology staff to stay current.
• Engage in ongoing training on audit, technology, and regulations.
• Prioritize project workflows and resolve issues with analysis.

Skills

Cyber security

IT audit

Risk management

Stakeholder leadership

Team leadership

Education

Bachelor's degree in computer science or information technology

Master's degree preferred

Job description

BNY Mellon seeks a Director to lead IT audit across Technology Infrastructure within Internal Audit. The role is based in New York, NY or Lake Mary, FL, and will define risk assessments, the annual audit plan, and audit scope while overseeing audits to meet professional standards.

The successful candidate will manage a global team, collaborate with senior stakeholders, and strengthen control frameworks across applications, governance, architecture, networks, data management, and lifecycle