Senior Director, Platform Cyber Risk & Security Strategy

BNY; Washington (District of Columbia); On-site; USD 180,000 - 280,000; Full time

Job summary

BNY seeks a Senior Director, Business Information Security Officer (BISO) to embed cyber security into platform strategy and delivery. You will lead risk management, regulatory readiness, and secure transformation, partnering with platform leadership, engineering, legal and compliance to balance speed with risk discipline.

You will own the platform cyber risk register, drive remediation, translate technical findings into business impact, and represent security in audits, client reviews and

Qualifications

• Bachelor's degree in computer science or related discipline; 15+ years of information security experience.
• Senior experience in cyber security and cyber risk management within regulated environments.
• Strong knowledge of threats, controls, IAM, incident response, architecture and resilience.
• Ability to engage executives and external stakeholders on complex security matters.

Responsibilities

• Act as the senior cyber security lead for an assigned platform, aligning security priorities to platform objectives and risk profile.
• Serve as the primary security advisor to platform leadership on threats, control effectiveness, resilience priorities and risk posture.
• Own and maintain the platform cyber risk register, identifying and prioritizing material risks and vulnerabilities.
• Drive remediation of high-priority cyber risks in partnership with technology, engineering and operations teams.
• Translate technical findings into concise business impact statements for senior leaders.
• Ensure secure by design in products, services, and transformation initiatives.

Skills

Senior leadership

Cyber security

Strategic thinking

Executive communication

Education

Bachelor's degree in CS or related

Advanced degree preferred

Job description

BNY seeks a Senior Director, Business Information Security Officer (BISO) to embed cyber security into platform strategy and delivery. You will lead risk management, regulatory readiness, and secure transformation, partnering with platform leadership, engineering, legal and compliance to balance speed with risk discipline.

You will own the platform cyber risk register, drive remediation, translate technical findings into business impact, and represent security in audits, client reviews and