Security Architecture and Application Security Senior Manager

BBVA; New York (NY); Hybride; USD 185 000 - 200 000; Plein temps

Résumé du poste

BBVA in New York is seeking an experienced Security Architecture and Application Security Senior Manager to lead security across complex technology initiatives. This hands-on leadership role covers security architecture, application security and project security governance, working with engineering and business teams from design through production.

You will review architectures, conduct threat modeling, ensure controls are implemented, and manage multiple initiatives with risk-based

Qualifications

• 10+ years of experience in Information Security, Security Architecture, or related roles.
• Strong knowledge of network, cloud, IAM, encryption and secure software development.
• Experience in banking/financial services and regulatory standards.

Responsabilités

• Lead security architecture reviews for applications, APIs, cloud services, and third-party solutions.
• Manage security workstreams across multiple concurrent initiatives and drive security deliverables to completion.
• Collaborate with Engineering, Risk, Compliance and business stakeholders to ensure compliant controls.

Connaissances

Security Architecture

Application Security

Threat Modeling

Regulatory Compliance

Formation

Bachelor's degree in Information Security/CS/IT/Engineering

Outils

Azure

AWS

GCP

Description du poste

## Security Architecture and Application Security Senior ManagerApply: Hybrid: New York: Full time: Posted Today: End Date: December 31, 2026 (30+ days left to apply): JR00114962# **Excited to grow your career?**BBVA is a global company with more than 160 years of history that operates in more than 25 countries where we serve more than 80 million customers. We are more than 121,000 professionals working in multidisciplinary teams with profiles as diverse as financiers, legal experts, data scientists, developers, engineers and designers.# **About the job:****Position Summary**We are looking for an experienced Security Architect with strong Application Security expertise who can lead security across a portfolio of complex technology initiatives within BBVA CIB US. This is a hands-on security leadership role combining **security architecture, application security and project security management**. The successful candidate will work with engineering and business teams from early design through production, reviewing solution architectures, identifying security risks, defining security requirements and ensuring agreed controls are implemented. The role requires someone who can **manage multiple initiatives simultaneously**, prioritize security activities based on risk, and independently drive projects through the security lifecycle while partnering with Corporate Security Architecture, Engineering, Application Development, Infrastructure, Cloud, Risk and business stakeholders. **Key Responsibilities*** Perform **security architecture reviews and threat modeling** for applications, APIs, cloud services, infrastructure and third-party solutions.* Evaluate architecture patterns covering **authentication and authorization, IAM, encryption, secrets/key management, APIs, network segmentation, data protection, cloud security and secure integration patterns*** Validate that approved architecture and security controls have been implemented as designed before production deployment.* **Own the security workstream for multiple concurrent technology initiatives**, establishing security deliverables, dependencies, priorities and milestones and proactively driving them to completion.* Manage a portfolio of security engagements simultaneously, prioritizing activities based on **business criticality, architecture complexity, security risk and delivery timelines**.* Identify security-related project risks and dependencies early, escalate blockers when necessary, and ensure security activities do not become a late-stage impediment to delivery.* **Participate in project governance** meetings and provide security guidance to project teams.* **Review Security Models** produced by Corporate Security Architecture.* **Assess proposed architectures** for alignment with BBVA security standards and U.S. regulatory requirements.* **Provide delegated Security Architecture** and Application Security support for local initiatives.* **Identify security gaps** and recommend compensating controls where appropriate.* **Review initiatives** that may fall outside the standard lifecycle process, including third-party platforms, trading venues, and standalone SaaS solutions.* **Validate that approved security controls** are implemented as designed prior to production deployment.* **Serve as the primary security advisor** for assigned projects.* **Collaborate with Corporate Security Architecture**, Enterprise Architecture, Technology Engineering, Application Development, Infrastructure, Risk, Compliance, and business stakeholders. **Qualifications and Experience*** **Bachelor's degree** in Information Security, Computer Science, Information Technology, Engineering, or related field (or equivalent experience).* **10+ years of experience** in Information Security, Security Architecture, Application Security, Infrastructure Security, or Cybersecurity Engineering.* Experience participating in technology projects and implementing security controls.* Strong understanding of **network security, cloud security, identity and access management, application security, and infrastructure security**.* Experience performing security risk assessments and architecture reviews.* Familiarity with financial services security requirements and regulatory expectations.* Excellent written and verbal communication skills.* Ability to influence cross-functional teams without direct authority.* Experience in banking or financial services.* Knowledge of cybersecurity and regulatory frameworks including NIST Cybersecurity Framework (NIST CSF), NIST 800-53, ISO 27001, CIS Controls, New York DFS Cybersecurity Regulation (23 NYCRR Part 500), SEC cybersecurity requirements, NFA cybersecurity requirements, FFIEC Guidelines, EU DORA (Digital Operational Resilience Act), SWIFT Customer Security Controls Framework (CSCF), FedLine security requirements, CHIPS-related security requirements, and CRI Profile, or similar frameworks.* Experience reviewing **cloud architectures (Azure, AWS, or GCP)**.* Knowledge of AI security, third-party risk, and secure software development practices.* **Professional certifications** such as CISSP, CCSP, GCSA, CCSK, CSSLP, SANS certifications (GWEB) and others.* Strong **competencies** in Security Architecture, Project Security Governance, Risk Assessment, Application Security, Infrastructure Security, Cloud Security, Regulatory Compliance, Security Control Validation, Stakeholder Management, Analytical Thinking, Problem Solving, and Communication & Collaboration* Spanish proficiency is a plus All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. With respect to this position in our New York Office, the expected base salary ranges from $185,000 to $200,000. It is not typical for offers to be made at or near the top of the range. Salary offers are based on a wide range of factors including relevant skills, training, experience, education, and, where applicable, certifications obtained. Market and organizational factors are also considered. In addition to salary and a generous employee benefits package, successful candidates are eligible to receive a discretionary bonus. \\*Employment eligibility to work with BBVA in the U.S. is required as the company will not pursue visa sponsorship for these positions