Senior Information Compliance & Risk Lead

BNY; Washington (District of Columbia); On-site; USD 104,000 - 253,000; Full time

Job summary

BNY is seeking a Senior Information Compliance Specialist to join the Information Security Division in Washington, DC, with roles also in Lake Mary, FL. You will lead FedRAMP/NIST RMF compliance, drive ATO processes for information systems, and coordinate audits while collaborating with cross-functional teams.

The position emphasizes governance, risk, and control improvements. The ideal candidate has 10+ years in information security, federal compliance experience, and relevant certifications,

Qualifications

• Bachelor's degree in computer science or related discipline, or equivalent work experience; advanced degree preferred.
• 10+ years of experience in information security or related tech roles; securities/financial services experience is a plus.
• Experience with federal compliance preferred.
• Demonstrated experience managing or executing successful ATO processes preferred.
• CISM, CISSP, or CISA certifications preferred.
• Deep understanding of FISMA and NIST SPs 800-53/800-37/800-171.
• Excellent decision-making, ethics, teamwork, multitasking, and attention to detail.
• Strong organization and process management skills.
• Strong knowledge of RMF.
• Proficiency in Microsoft 365 applications.

Responsibilities

• Possess deep understanding of FedRamp High and NIST RMF and related legislation like FISMA.
• Develop and maintain security documentation required by FedRAMP, with regular reviews.
• Ensure internal controls related to information risk management are effective and align with FedRAMP High.
• Lead the Authority to Operate (ATO) processes for information systems.
• Demonstrate knowledge of information risk management concepts and control/risk management.
• Perform security control assessments and provide remediation recommendations.
• Serve as primary point of contact for audits, security docs, and control compliance.
• Collaborate with technical and non-technical teammates to address issues and collect risk information.
• Provide briefings on ATO status, audit findings, and remediations.
• Help reduce reputational/regulatory risk from non-compliance with bank policies.
• Identify and assess potential threats and vulnerabilities.
• Prepare and coordinate audit evidence and respond to audit findings.

Skills

FedRamp High

NIST RMF

FISMA compliance

ATO processes

Information risk management

Security control assessments

Audit coordination

Cross-functional collaboration

M365 proficiency

Education

Bachelor's degree in computer science or related discipline

Advanced degree preferred

Job description

BNY is seeking a Senior Information Compliance Specialist to join the Information Security Division in Washington, DC, with roles also in Lake Mary, FL. You will lead FedRAMP/NIST RMF compliance, drive ATO processes for information systems, and coordinate audits while collaborating with cross-functional teams.

The position emphasizes governance, risk, and control improvements. The ideal candidate has 10+ years in information security, federal compliance experience, and relevant certifications,