Vice President, Information Security- Full Stack

BNY; Pittsburgh (Allegheny County); On-site; USD 180,000 - 260,000; Full time

Job summary

BNY seeks a Vice President, Information Security to safeguard information assets by developing, implementing, and managing security strategies across the organization. This role emphasizes risk management, policy implementation, and resilience within a global IT environment.

As an Individual Contributor, you will drive security programs, coordinate incident response, conduct assessments, and train staff to uphold trust and integrity.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field.
• Advanced certifications such as CISSP or CISM are preferred.
• Typically 6-10 years of experience in information security or related IT disciplines.

Responsibilities

• Develop and implement comprehensive information security strategies by applying advanced knowledge of security protocols and risk management.

Skills

Java

Spring

Spring Boot

Angular

RESTful web services

SOA/Full-stack

Agile / SDLC

Leadership & mentoring

Education

Bachelor's degree in Information Security, Computer Science, or related field

CISSP or CISM certifications preferred

Tools

JUnit

Mockito

Git

WebSphere

Tomcat

Apache

MyBatis

Hazelcast

Kafka

Jira

AngularJS

jQuery

Job description

In this role, you'll make an impact in the following ways

• Lead the technical design, development, and implementation of secure, scalable application systems.
• Build and enhance full-stack solutions using Java, Spring Boot, Angular, and Oracle technologies.
• Champion test-driven development, code quality, code reviews, and engineering best practices.
• Guide software delivery across the development lifecycle, including controlled deployments, production support, and continuous improvement.
• Collaborate with engineers, business users, project managers, and cross-functional partners to deliver effective solutions.
• Mentor team members, promote shared accountability, and elevate engineering standards across the team.

To be successful in this role, we're seeking the following:

Required qualifications

• At least 6+ years of experience developing enterprise web applications using Java, Spring, Spring Boot, and Angular.
• Strong proficiency in Core Java, J2EE, RESTful web services, and full-stack application development.
• Hands-on experience with Oracle or comparable relational databases and SQL.
• Demonstrated experience with JUnit, Mockito, test-driven development, Git, and code-review practices.
• Experience deploying and supporting applications on platforms such as Apache, WebSphere, or Tomcat.
• Strong understanding of the software development lifecycle and Agile delivery practices.
• Proven ability to lead technical delivery, collaborate across functions, and mentor engineers.

Preferred qualifications

• Experience with MyBatis, Hazelcast, Kafka, and Jira.
• Knowledge of JavaScript, HTML, CSS, AngularJS, jQuery, and modern Angular versions.
• Experience working with MySQL or Sybase databases.
• Familiarity with both Agile and Waterfall delivery environments.

POSITION SUMMARY:

The Vice President, Information Security plays a pivotal role in safeguarding BNY's information assets by developing, implementing, and managing security strategies. This position is crucial in upholding BNY's Principles of trust and integrity, ensuring that security measures align with the organization's Strategic Pillars. As an Individual Contributor, the Vice President is responsible for leveraging their expertise in the Information Security field to mitigate risks and enhance the protection of sensitive data across the company. This role supports the broader mission of BNY by maintaining a secure and resilient digital environment, fostering an organizational culture of security awareness.

PRIMARY RESPONSIBILITIES:

• Develop and implement comprehensive information security strategies by applying advanced knowledge of security protocols and risk management.
• Conduct regular security assessments and audits by utilizing industry-standard practices to identify vulnerabilities and recommend improvements.
• Collaborate with cross-functional teams to integrate security measures into business processes, ensuring seamless protection of digital assets.
• Monitor emerging security threats and trends, providing expert insights to proactively address potential risks.
• Lead incident response efforts by coordinating with relevant stakeholders to ensure timely resolution and mitigation of security breaches.
• Educate and train employees on security best practices, fostering a culture of security awareness across the organization.

EDUCATION/QUALIFICATIONS:

• Bachelor's degree in Information Security, Computer Science, or a related field
• Advanced certifications such as CISSP or CISM are preferred

EXPERIENCE:

Typically 6-10 years of experience

SKILLS:

• Strong analytical and problem-solving skills, with the ability to assess complex security challenges
• Excellent communication and collaboration capabilities to work effectively with various teams
• Proficiency in security tools and technologies, demonstrating expertise in the Information Security domain