Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Director, Information Security – Continuous Exposure Management role.
Rezi rewrites your resume against BNY Mellon's job description. Free.
Tailor your resume to this Director, Information Security – Continuous Exposure Management role.
Rezi rewrites your resume against BNY Mellon's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Director, Information Security – Continuous Exposure Management posting at BNY Mellon — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Director, Information Security – Continuous Exposure Management posting at BNY Mellon — free, in seconds.
About the Role
This role is responsible for acting as the product owner for the exposure management framework, setting the vision, roadmap, and backlog, and prioritizing work by risk reduction and business value. The position will leverage product management skills at an organizational level to drive change, build cases for change, align senior stakeholders, and help teams adopt new ways of working. It will also utilize AI to transform the identification, prioritization, and remediation of exposure, taking uses from proof of concept to live service.
Responsibilities
- Act as product owner for our exposure management framework, setting the vision, roadmap and backlog, and prioritizing work by risk reduction and business value.
- Use product management skills at an organizational level to drive change, building the case for change, aligning senior stakeholders and helping teams across the firm adopt new ways of working.
- Use AI to transform how we identify, prioritize and remediate exposure, finding where AI can automate or speed up our processes, and taking those uses from proof of concept to live service.
- Plan and run delivery sprints: define clear outcomes, manage dependencies, remove blockers, and report progress to stakeholders and senior leadership.
- Work across cyber engineering, application security, technology, risk and governance teams to achieve shared outcomes.
- Integrate new security solutions into existing frameworks, controls and workflows so they add value without creating friction for delivery teams.
- Evolve and iterate processes, frameworks and technology at pace, using data, metrics and feedback to measure impact and decide what to change next.
- Make sure changes meet policy, regulatory and compliance requirements, and that controls stay effective as the framework evolves.
- Analyze security data and assessments to give senior stakeholders insights, conclusions and actionable recommendations.
Requirements
- Bachelor’s degree in computer science or a related discipline, or equivalent work experience required; advanced degree preferred.
- Extensive experience in information security or related technology required, including a strong understanding of cyber security frameworks (such as NIST CSF, ISO 27001, CIS Controls or Continuous Threat Exposure Management (CTEM)) and their related tooling and technology.
- Proven product management experience at an organizational level, including owning a roadmap and backlog and delivering change across multiple teams.
- Hands-on experience running agile delivery (Scrum, Kanban or similar), including sprint planning, backlog management and measuring outcomes.
- Experience using AI or automation to transform processes, with a practical understanding of where AI adds value and where it doesn’t.
- Experience in exposure or vulnerability management, application security testing or security control frameworks is highly desirable.
- Experience in the securities or financial services industry is a plus.
- Strong leadership presence and interpersonal skills, with the ability to influence without direct authority.
- Excellent communication and stakeholder engagement across time zones and cultures.
- Results-oriented with a focus on delivery, accountability and quality, and comfortable working at pace in a changing environment.
Skills
- Information security
- Cyber security frameworks (NIST CSF, ISO 27001, CIS Controls, CTEM)
- Product management
- Agile delivery (Scrum, Kanban)
- AI/Automation
- Exposure management
- Vulnerability management
- Application security testing
- Security control frameworks
- Leadership
- Interpersonal skills
- Communication
- Stakeholder engagement
Location
- London
Work Type
- Full-time
Experience Level
- Director
Education Level
- Bachelor's degree in computer science or related discipline, or equivalent work experience
- Advanced degree preferred
Benefits
- Highly competitive compensation
- Benefits and wellbeing programs
- Access to flexible global resources and tools
- Generous paid leaves, including paid volunteer time
About the Company
- BNY's culture allows us to run our company better and enables employees’ growth and success.
- A leading global financial services company at the heart of the global financial system, influencing nearly 20% of the world’s investible assets.
- Teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.
- Recognized as a top destination for innovators, where bold ideas meet advanced technology and exceptional talent.
- Powering the future of finance.
- Check out the latest BNY news at: BNY Newsroom & BNY LinkedIn.
- Recent awards include: America’s Most Innovative Companies, Fortune, 2025; World’s Most Admired Companies, Fortune 2025; “Most Just Companies”, Just Capital and CNBC, 2025.
Equal Opportunity
- BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.