Vice President, Information Security

Job Title: Risk Controls Self-Assessment Control Owner – Insider Threat Overview: We are seeking a highly skilled and detail-oriented Risk Controls Self-Assessment (RCSA) Control Owner to support Insider Threat management within a highly regulated financial institution. This position will play a critical role in hosting and facilitating assessments of insider threat controls, monitoring and reporting control effectiveness, and providing actionable insights to drive improvement across the enterprise. The ideal candidate will have a strong understanding of insider risk and a proven ability to manage control-related activities in a fast-paced, compliance-driven environment. Key Responsibilities: 1. Control Assessments and Facilitation: * Host and support business units in performing Risk Control Self-Assessments (RCSA) for insider threat controls. * Ensure alignment with regulatory requirements and organizational policies throughout the assessment process. * Provide guidance and expertise to business unit stakeholders to identify, document, and assess control effectiveness. 2. Monitoring and Reporting: * Continuously monitor the effectiveness of insider threat controls across the organization. * Develop and maintain metrics and reporting mechanisms to evaluate control performance. * Identify and escalate control deficiencies, gaps, or risks, and support business units in developing remediation plans. 3. Scorecard Development and Presentation: * Design and maintain scorecards to summarize insider threat control performance and effectiveness metrics. * Present quarterly scorecards to enterprise control managers, highlighting key findings, trends, and recommendations for improvement. 4. Collaboration and Communication: * Partner with Insider Risk, Compliance, and Audit teams to ensure proper governance and oversight of insider threat controls. * Act as a liaison between business units and enterprise control managers, ensuring clear communication of risks, expectations, and outcomes. 5. Continuous Improvement: * Contribute to the development and enhancement of RCSA processes, tools, and frameworks to ensure efficiency and accuracy. * Stay informed about emerging risks, regulatory changes, and best practices in insider threat management. Qualifications: Education: Bachelor's degree in Risk Management, Business Administration, Cybersecurity, or a related field. Experience: * 7+ years of experience in risk management, internal controls, audit, or insider threat programs in a highly regulated environment. * Strong understanding of RCSA processes and enterprise risk management frameworks (e.g., COSO, NIST). * Familiarity with insider threat risks, behaviors, and mitigation strategies in financial institutions. Skills:

• Exceptional analytical and problem-solving skills.
• Strong written and verbal communication skills with the ability to present

complex information to senior stakeholders. * Proficiency in developing metrics, scorecards, and dashboards (e.g., Excel, Power BI, Tableau). * Ability to manage multiple priorities and deadlines in a dynamic environment. Preferred Qualifications:

• Experience with insider threat detection and monitoring tools.
• Knowledge of regulatory requirements (e.g., FFIEC, SOX, GLBA) and their

application to insider risk. * Professional certifications such as CISA, CRISC, CISSP, or similar are highly desirable. Key Competencies:

• Results-driven with a focus on continuous improvement.
• Collaborative and able to build strong partnerships across teams.
• Detail-oriented with strong organizational skills and attention to accuracy.

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide. Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary. At BNY, our culture speaks for itself, check out the latest BNY news at BNY Newsroom [ & BNY LinkedIn [ Here’s a few of our recent awards:

• America’s Most Innovative Companies, Fortune, 2025
• World’s Most Admired Companies, Fortune 2025
• “Most Just Companies”, Just Capital and CNBC, 2025

Our Benefits and Rewards: BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life’s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter. BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans. BNY assesses market data to ensure a competitive compensation package for our employees. The expected base salary for this position when employment commences can be found in the Job Info section at the bottom of the posting. Base salary offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. Base salary is only part of the total rewards package, which may include eligibility for an annual discretionary incentive award. Subject to the terms and conditions of the applicable plans then in effect, eligible employees may enroll in a 401(k) plan as well as participate in Company-sponsored medical, dental, vision, and basic life insurance plans for the employee and the employee’s eligible dependents. Eligible employees also may receive other benefits (including various paid time off benefits, such as vacation and sick time), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment. If hired, the employee will be in an “at will” position and the Company reserves the right to modify base salary (as well as any other discretionary payments or compensation programs) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.