Senior Security Architecture & App Security Lead

Cybersecurity Jobs; New York (NY); On-site; USD 185,000 - 200,000; Full time

Job summary

BBVA CIB US is seeking a hands-on Security Architecture and Application Security Senior Manager in New York to lead security across complex technology initiatives. The role requires deep expertise in security architecture, cloud security, and regulatory alignment.

The candidate will drive threat modeling, architecture reviews, and secure implementation across applications, APIs, and infrastructure, coordinating with multiple teams and stakeholders to mitigate risk and ensure compliant delivery.

Qualifications

• 10+ years of experience in information security and security architecture.
• Experience reviewing cloud architectures (Azure, AWS, or GCP).
• Professional certifications such as CISSP, CCSP, GCSA, CCSK, CSSLP, SANS (GWEB).
• Ability to influence cross-functional teams without direct authority.

Responsibilities

• Conduct security architecture reviews and threat modeling for applications, APIs, cloud services, infrastructure, and third-party solutions.
• Assess architecture patterns across authentication, IAM, encryption, APIs, network segmentation, data protection, and secure integration patterns.
• Verify that approved architecture and security controls are implemented before production deployment.
• Lead security workstreams across multiple concurrent technology initiatives, defining deliverables and milestones.

Skills

Information Security

Security Architecture

Application Security

Infrastructure Security

IAM / Identity & Access Management

Network Security

Cloud Security

Communication Skills

Education

Bachelor's degree in a related field

Job description

BBVA CIB US is seeking a hands-on Security Architecture and Application Security Senior Manager in New York to lead security across complex technology initiatives. The role requires deep expertise in security architecture, cloud security, and regulatory alignment.

The candidate will drive threat modeling, architecture reviews, and secure implementation across applications, APIs, and infrastructure, coordinating with multiple teams and stakeholders to mitigate risk and ensure compliant delivery.