We use cookies. Find out more about it here. By continuing to browse this site you are agreeing to our use of cookies.

Job posting has expired

#alert
Back to search results
New

Senior Director - Digital Asset Technical Information Security Officer

Hispanic Technology Executive Council
United States, New York, New York
May 23, 2025

At BNY, our culture empowers you to grow and succeed. As a leading global financial services company at the center of the worlds financial system we touch nearly 20% of the worlds investible assets. Every day around the globe, our 50,000+ employees bring the power of their perspective to the table to create solutions with our clients that benefit businesses, communities and people everywhere.

We continue to be a leader in the industry, awarded as a top home for innovators and for creating an inclusive workplace. Through our unique ideas and talents, together we help make money work for the world. This is what #LifeAtBNY is all about.

Were seeking a future team member for the role of Senior Director - Digital Asset Technical Information Security Officer to join our Information Security Division-Digital Assets team. This role can be located in either our New York City, Pittsburgh, or Lake Mary (northern Orlando, FL) with in office expectations at minimum 4 days per week

In this role, youll make an impact in the following ways:

  • You will consult, recommend, and influence security strategy, configuration, and architecture of our Digital Asset initiatives to embed information and cyber security controls.
  • You'll be responsible for the design, development, implementation, and continuous hygiene of security controls, policy requirements, and industry regulatory and compliance requirements.
  • Lead and facilitate discussions of emerging security standards, current state, and emerging risk to our Digital Asset strategy.
  • Contributes to the development and implementation of security architecture, standards, procedures, and guidelines for Digital Asset security.
  • Find, track, and fix risks, threat modeling and consulting with the business and infrastructure personnel through our risk register, governance, and lifecycle of infrastructure and software development lifecycles.
  • Reviews and analyzes security assessments to provide insights, conclusions, and actionable recommendations.
  • Recommends course of action to mitigate risk and ensures that appropriate standards are established and published.

To be successful in this role, were seeking the following:

  • 10+ years in financial enterprise security with 5+ years on crypto and digital ledger technologies.
  • Exceptional communication and teamwork skills.
  • Secure multi-party computation (MPC/SMPC,) cryptographic protocols, key management and protection systems, techniques and processes.
  • Practiced experience with DeFi protocols, applications, risks and emerging threats.
  • Asset, key and wallet recovery secure processes.
  • Transaction intelligence and blockchain surveillance.
  • Incident response and attack prevention in digital assets.
  • Threat Modeling, Pen testing and Red/Blue/Hunt team experience.
  • SIEM and Threat Detection experience.
  • Security code review in cryptosystem projects.
  • Blockchain and cryptocurrency forensics.
  • Enterprise Cloud security, secure deployment pipelines, and infrastructure as code security.
  • Systems Security (security architecture, application security, database security, network security, mobile security, cloud security, data center security, defensive development, SSDLC (secure software development life cycle), static code analysis, dynamic code analysis, system analysis).
  • Strong understanding of cybersecurity frameworks and standards (e.g. NIST Cybersecurity Framework, ISO 27001).
  • Enterprise Security (compliance, security strategy and tactics, physical security, security awareness training, threat and risk assessment, forensics, proactive and reactive corporate security programs).
  • Security Testing/Assurance (penetration testing (blackbox, greybox, whitebox), physical pentesting, security code review, vulnerability scanning, red/blue teaming).
  • Systems Resilience - research and methods.
  • Business continuity and disaster recovery and Incident response management.
  • Cyber engineering, attack and malware analysis, security intelligence and research.

At BNY, our culture speaks for itself. Heres a few of our awards:

  • Americas Most Innovative Companies, Fortune, 2024
  • Worlds Most Admired Companies, Fortune 2024
  • Human Rights Campaign Foundation, Corporate Equality Index, 100% score, 2023-2024
  • Best Places to Work for Disability Inclusion, Disability: IN 100% score, 2023-2024
  • Most Just Companies, Just Capital and CNBC, 2024
  • Dow Jones Sustainability Indices, Top performing company for Sustainability, 2024
  • Bloombergs Gender Equality Index (GEI), 2023

Our Benefits and Rewards: BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your lifes journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.

BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.

(web-df5f8654-k5gvp)