[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Bank of New York Mellon jobs](https://jobs.opennash.com/companies/bank-of-ny-mellon/) · [Search jobs](/search/) Bank of New York Mellon · New York, NY # Senior Director, Information Security Manager (Cyber GRC Frameworks/Policies/Controls) New York, NY, United States Full-time Director Security Listed on Bank of New York Mellon’s official careers site. Posted October 23, 2026. Check that it is still open and apply there. [Apply on Bank of New York Mellon’s careers site →](https://eofe.fa.us2.oraclecloud.com/hcmUI/CandidateExperience/en/sites/BNY-Careers/job/81551) [OpenNash Jobs](https://jobs.opennash.com/) / [Bank of New York Mellon](https://jobs.opennash.com/companies/bank-of-ny-mellon/) / Senior Director, Information Security Manager (Cyber GRC Frameworks/Policies/Controls) ## Job description At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide. Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary. We’re seeking a future team member for the role of Senior Director, Information Security (Cyber GRC Frameworks, Policies, and Controls) to join our CyberSecurity team. This role is located in New York. In this role, you’ll make an impact in the following ways: Lead development, maintenance, and modernization of cyber governance frameworks, policies, standards, and control principles. Define and maintain a common cyber control taxonomy and control framework aligned to enterprise risk, regulatory obligations, and technology domains. Rationalize control inventories to reduce duplication, remove ambiguity, and improve consistency across Platforms and shared services. Map controls to risks, policy requirements, standards, obligations, important services, and accountable owners. Establish and govern exception processes for cyber standards and control requirements, including review, challenge, documentation, and escalation. Partner with control owners and technology stakeholders to embed policy and control requirements earlier in the change, engineering, and delivery lifecycle. Support control framework alignment across key domains such as identity, infrastructure, application security, third-party risk, and resilience. Define control objectives, minimum requirements, and design expectations to support consistent assessment and testing outcomes. Collaborate with governance and reporting teams to improve management transparency and control health reporting. Drive policy refresh cycles based on threat change, regulatory developments, audit feedback, and strategic transformation priorities. Contribute to integration of AI and emerging technology governance requirements into the broader cyber control architecture. Support target-state enablement through improved workflow, data quality, and automated evidence opportunities. To be successful in this role, we’re seeking the following: Bachelor's degree in computer science or a related discipline, or equivalent work experience required, advanced degree preferred. 15+ years of experience in information security or related technology experience required, experience in the securities or financial services industry is a plus. Bachelor’s degree or equivalent experience in Cybersecurity, Information Security, Risk Management, Technology, or a related discipline. Significant experience in Cyber GRC, technology risk, control framework management, cyber policy, or related governance functions. Strong understanding of cybersecurity control domains, including identity, infrastructure, application security, vulnerability management, resilience, and third-party risk. Experience designing or managing policy hierarchies, standards frameworks, and control inventories in a complex enterprise environment. Knowledge of risk and control mapping, control rationalization, and governance processes. Ability to translate regulatory, audit, and operational requirements into practical control requirements. Strong written communication and stakeholder management skills. ## At a glance - Posted by the employer: Oct 23, 2026 - First seen by OpenNash: Oct 26, 2026 - Last checked: Oct 26, 2026 - Listed for: 3 days - Location: New York, NY, United States - Employment type: Full-time[Apply on Bank of New York Mellon’s careers site →](https://eofe.fa.us2.oraclecloud.com/hcmUI/CandidateExperience/en/sites/BNY-Careers/job/81551) ## More jobs at Bank of New York Mellon ### [Corporate Security Engineering – Lead Engineer Role](https://jobs.opennash.com/companies/bank-of-ny-mellon/jobs/fcf9d9b33b2341797f45/) New York, NY, United States ### [Director, Cybersecurity Regulatory Engagement (1LOD)](https://jobs.opennash.com/companies/bank-of-ny-mellon/jobs/c1583a5ff91c4077564c/) New York, NY, United States ### [SVP – Cyber Technology Engineer](https://jobs.opennash.com/companies/bank-of-ny-mellon/jobs/503822934aa0922f67fb/) New York, NY, United States ### [Senior Director of Network Security – Engineering Lead](https://jobs.opennash.com/companies/bank-of-ny-mellon/jobs/3df11a9056d3b2ecaf6a/) New York, NY, United States ### [Senior Director, Regional Head of Security (Americas) - Global Corporate Security](https://jobs.opennash.com/companies/bank-of-ny-mellon/jobs/07649719b3c24d4249cb/) New York, NY, United States ## Similar jobs at other companies ### [Cyber Security, Information System Security Manager (ISSM)](https://jobs.opennash.com/companies/bae-systems/jobs/0875b1d87e3e3875de47/) BAE Systems · Hudson, New Hampshire, United States ### [Cyber Security, Information Systems Security Manager (ISSM)](https://jobs.opennash.com/companies/bae-systems/jobs/bc7b920627379e0a3add/) BAE Systems · Hudson, New Hampshire, United States ### [Information Risk Manager (Cyber Security, Information Risk & DORA) (m/w/d)](https://jobs.opennash.com/companies/zurich-insurance-group/jobs/a40bc5be6e17336d4a90/) Zurich Insurance Group · Köln, DE ### [Senior Information Security Engineer - Security Engineering](https://jobs.opennash.com/companies/williams-sonoma/jobs/5f7981b5cfc0b09eb417/) Williams-Sonoma · Rocklin, CA, United States ### [Sr. Manager, Cyber Security - Information Security Office Consultant](https://jobs.opennash.com/companies/capital-one-financial/jobs/ad2094ecfe125898a070/) Capital One Financial · Plano, TX OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)