Director, Technology Controls Framework & Governance

BNY Mellon; Pittsburgh, Northern (Allegheny County, KY); Hybrid; USD 180,000 - 240,000; Full time

Job summary

BNY Mellon in Pittsburgh, PA invites a Director, Technology Controls Management Framework to lead the evolution of the framework across Technology, partnering with Infrastructure, Cybersecurity, Data, and IT Governance.

The role drives governance, design principles, measurement, and alignment with COBIT/NIST/ISO, ensuring a coherent, auditable control environment while collaborating with Enterprise Risk, Internal Audit, and Compliance.

Qualifications

• 10+ years of progressively responsible experience in Technology Governance, Technology Risk, Information Security Governance, Controls Management, Operational Risk, or related disciplines.
• Demonstrated experience designing, implementing, or maturing enterprise governance or controls frameworks.
• Experience working within large, complex, highly regulated organizations.
• Strong understanding of Technology controls across infrastructure, cybersecurity, software engineering, cloud platforms, data, and emerging technologies.
• Experience working with Internal Audit, Enterprise Risk, regulators, and senior Technology leadership.

Responsibilities

• Lead the stewardship, evolution, and continuous improvement of the Technology Controls Management Framework across the Technology organization.
• Partner with Infrastructure, Cybersecurity, Data, Software Engineering, AI, Enterprise Risk, Internal Audit, and governance functions to establish methodologies, governance standards, control design principles, measurement practices, and alignment with industry frameworks.
• Define enterprise expectations and minimum engineering standards for Technology control design, including automation, evidence, ownership, monitoring, testability, and measurable outcomes.
• Establish methodologies and standards for measuring Technology control effectiveness, including KPIs, KCIs, KRIs, evidence collection, monitoring, testing, and control health reporting.
• Align the Technology Controls Management Framework to COBIT, NIST, ISO 27001 and other standards; conduct benchmarking and recommend enhancements for maturity and consistency.
• Build partnerships with Technology leadership, Enterprise Risk, Compliance, Internal Audit, and governance organizations; support audit and regulatory responses with practical problem solving.

Job description

BNY Mellon in Pittsburgh, PA invites a Director, Technology Controls Management Framework to lead the evolution of the framework across Technology, partnering with Infrastructure, Cybersecurity, Data, and IT Governance.

The role drives governance, design principles, measurement, and alignment with COBIT/NIST/ISO, ensuring a coherent, auditable control environment while collaborating with Enterprise Risk, Internal Audit, and Compliance.