Senior Information Security & Compliance Lead

BNY; Washington (District of Columbia); On-site; USD 130,000 - 170,000; Full time

Job summary

BNY seeks a Senior Information Compliance Specialist to join the Information Security Division - Business Information Security Office in Washington, DC. The role focuses on FedRAMP High, NIST RMF, and FISMA compliance, leading ATO processes, and maintaining security documentation.

The candidate should have 10+ years in information security, federal compliance experience, and certifications such as CISM/CISSP/CISA. A bachelor's degree is required, advanced degree preferred.

Qualifications

• Bachelor's degree in computer science or related discipline, or equivalent work experience.
• 10+ years of experience in information security or related technology experience.
• Experience in the securities or financial services industry is a plus.
• Experience with federal compliance preferred.
• Certified Information Security Management (CISM), Certified Information Systems Security Professional (CISSP), or Certified Information Systems Auditor (CISA) preferred.

Responsibilities

• Possess deep understanding of FedRamp High and NIST RMF and FISMA.
• Develop and maintain FedRamp security documentation with frequent reviews.
• Ensure internal controls for information risk management are effective.
• Lead the Authority to Operate (ATO) processes for information systems.
• Demonstrate knowledge of information risk management best practices and control concepts.
• Perform security control assessments and provide improvement recommendations.
• Serve as the primary contact for audits, security documentation, and control compliance.
• Collaborate with technical and non-technical teams to address issues and collect risk information.
• Brief on ATO status, audit findings, remediations, and control gaps.
• Identify and assess potential threats and vulnerabilities.
• Prepare and coordinate evidence for audits and respond to findings.

Skills

FedRAMP High

NIST RMF

FISMA

ATO processes

information risk management

security assessments

audits liaison

risk communication

Education

Bachelor's degree in CS or related

Advanced degree preferred

Tools

CISM

CISSP

CISA

Job description

BNY seeks a Senior Information Compliance Specialist to join the Information Security Division - Business Information Security Office in Washington, DC. The role focuses on FedRAMP High, NIST RMF, and FISMA compliance, leading ATO processes, and maintaining security documentation.

The candidate should have 10+ years in information security, federal compliance experience, and certifications such as CISM/CISSP/CISA. A bachelor's degree is required, advanced degree preferred.