Director, Technology Controls Framework & Governance

BNY; Pittsburgh (Allegheny County); On-site; USD 140,000 - 210,000; Full time

Job summary

BNY seeks a Director, Technology Controls Management Framework in Pittsburgh, PA to lead the evolution of the firm’s technology controls framework. You will partner with Infrastructure, Cybersecurity, Data, and Software Engineering to design and implement risk-based controls across the Technology organization.

The role emphasizes policy governance, control design standards, measurement of effectiveness, and alignment with COBIT, NIST, and ISO 27001.

Qualifications

• 10+ years of experience in Technology Governance, Technology Risk, Information Security Governance, Controls Management, Operational Risk, or related disciplines.
• Experience designing, implementing, or maturing enterprise governance or controls frameworks.
• Experience in large, complex, highly regulated organizations.

Responsibilities

• Lead the evolution and maturity of the Technology Controls Management Framework, including governance, taxonomy, lifecycle, and measurement.
• Author and govern technology policies, standards, methodologies, and documentation.
• Define enterprise expectations and engineering standards for Technology control design, including automation and testability.
• Establish methodologies for measuring control effectiveness, with KPIs, KCIs, KRIs, and evidence collection.
• Align the framework to industry standards such as COBIT, NIST, ISO 27001, and related frameworks.
• Build partnerships with Technology leadership, Enterprise Risk, Compliance, Internal Audit, and governance groups.

Skills

Technology governance

Technology risk

Information security governance

Controls management

Operational risk

Enterprise risk

Internal Audit collaboration

Job description

BNY seeks a Director, Technology Controls Management Framework in Pittsburgh, PA to lead the evolution of the firm’s technology controls framework. You will partner with Infrastructure, Cybersecurity, Data, and Software Engineering to design and implement risk-based controls across the Technology organization.

The role emphasizes policy governance, control design standards, measurement of effectiveness, and alignment with COBIT, NIST, and ISO 27001.