Sign up to access all features of our service.
  • Job search
  • Favorites
  • Create a CV
    New
  • Salaries
  • Subscriptions

Senior Director, Information Security Manager (Cyber GRC Frameworks/Policies/Controls)

The Bank of New York Mellon

Job-ID: 81551Category: Information SecurityLocation: New York, NY, United StatesSchedule: Full time, DayPosted: 2026-10-23Base Salary Min: 136500Base Salary Max: 350000At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.We’re seeking a future team member for the role of Senior Director, Information Security (Cyber GRC Frameworks, Policies, and Controls) to join our CyberSecurity team. This role is located in New York.In this role, you’ll make an impact in the following ways:Lead development, maintenance, and modernization of cyber governance frameworks, policies, standards, and control principles.Define and maintain a common cyber control taxonomy and control framework aligned to enterprise risk, regulatory obligations, and technology domains.Rationalize control inventories to reduce duplication, remove ambiguity, and improve consistency across Platforms and shared services.Map controls to risks, policy requirements, standards, obligations, important services, and accountable owners.Establish and govern exception processes for cyber standards and control requirements, including review, challenge, documentation, and escalation.Partner with control owners and technology stakeholders to embed policy and control requirements earlier in the change, engineering, and delivery lifecycle.Support control framework alignment across key domains such as identity, infrastructure, application security, third-party risk, and resilience.Define control objectives, minimum requirements, and design expectations to support consistent assessment and testing outcomes.Collaborate with governance and reporting teams to improve management transparency and control health reporting.Drive policy refresh cycles based on threat change, regulatory developments, audit feedback, and strategic transformation priorities.Contribute to integration of AI and emerging technology governance requirements into the broader cyber control architecture.Support target-state enablement through improved workflow, data quality, and automated evidence opportunities.To be successful in this role, we’re seeking the following:Bachelor's degree in computer science or a related discipline, or equivalent work experience required, advanced degree preferred. 15+ years of experience in information security or related technology experience required, experience in the securities or financial services industry is a plus.Bachelor’s degree or equivalent experience in Cybersecurity, Information Security, Risk Management, Technology, or a related discipline.Significant experience in Cyber GRC, technology risk, control framework management, cyber policy, or related governance functions.Strong understanding of cybersecurity control domains, including identity, infrastructure, application security, vulnerability management, resilience, and third-party risk.Experience designing or managing policy hierarchies, standards frameworks, and control inventories in a complex enterprise environment.Knowledge of risk and control mapping, control rationalization, and governance processes.Ability to translate regulatory, audit, and operational requirements into practical control requirements.Strong written communication and stakeholder management skills.About the organizationAt BNY, our culture speaks for itself, check out the latest BNY news at BNY Newsroom & BNY LinkedIn Here’s a few of our recent awards:America’s Most Innovative Companies, Fortune, 2025World’s Most Admired Companies, Fortune 2025“Most Just Companies”, Just Capital and CNBC, 2025Our Benefits and Rewards:BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life’s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.BNY assesses market data to ensure a competitive compensation package for our employees. The expected base salary for this position when employment commences can be found in the Job Info section at the bottom of the posting. Base salary offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. Base salary is only part of the total rewards package, which may include eligibility for an annual discretionary incentive award. Subject to the terms and conditions of the applicable plans then in effect, eligible employees may enroll in a 401(k) plan as well as participate in Company-sponsored medical, dental, vision, and basic life insurance plans for the employee and the employee’s eligible dependents. Eligible employees also may receive other benefits (including various paid time off benefits, such as vacation and sick time), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.If hired, the employee will be in an “at will” position and the Company reserves the right to modify base salary (as well as any other discretionary payments or compensation programs) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.About the companyAt BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

Vacancy posted 6 hours ago
Similar jobs that could be interesting for youBased on the Senior Director, Information Security Manager (Cyber GRC Frameworks/Policies/Controls) in New York, NY vacancy
  •  ...Cybersecurity: GRC & AI Governance – Senior Manager CFGI is a...  ...strengthen clients’ security governance,...  ...in GRC frameworks, regulatory...  ..., including policies, standards,...  ...registers, control libraries, and...  ...SEC cyber disclosure support...  ...on available information. These tools... 
    Cyber
    Senior
    Policy

    LinkedIn

    New York, NY
    5 days ago
  • $181k - $244k

     ...- together! Security Trust & Risk owns...  ...that lets GRC operate as an engineering...  ...byproduct of controls, monitoring,...  ...our cross-framework control crosswalk...  ...SOC 1/2 Type 2, Cyber Essentials, ENS...  ...platform work, how we manage our...  ...Employment Opportunity policy, we do not... 
    Cyber
    Senior
    Policy
    Work at office

    Anaplan

    New York, NY
    1 day ago
  • $97.9k - $179.5k

     ...reforms, and cyber threats....  ...activities to manage risk more...  ...leverage leading GRC platforms (...  ...motivated Senior level...  ...stakeholders are kept informed about...  ...), risk frameworks, regulatory...  ..., control frameworks,...  ...assessments, policies and procedures, cyber security/information... 
    Cyber
    Senior
    Policy
    Work experience placement
    Summer holiday
    Work at office
    Flexible hours

    EY (Ernst & Young)

    New York, NY
    2 days ago
  •  ...banking, leasing, securities, credit cards,...  ...Join SMBC’s Cyber Governance...  ...President, Cyber Controls Manager. You will lead...  ...& Regulatory Frameworks function and strengthen...  ...and internal policies and standards....  ..., Compliance, senior leaders, and...  ...an enterprise GRC platform such... 
    Cyber
    Policy
    For contractors
    Work at office
    Local area
    Work from home
    Worldwide

    SMBC

    New York, NY
    3 days ago
  •  ...reality.We are Secure,...  ...strengthen cyber defense through...  ...advisors to senior client stakeholders...  ...Senior Manager is expected...  ...for director and C-suite...  ...models, agentic frameworks, and AI/MCP...  ...IAM, cloud, GRC, or...  .... See more information on our benefits...  ...Affirmative Action Policy... 
    Cyber
    Senior
    Policy
    Work experience placement
    Live in
    Work at office
    Local area

    Accenture

    New York, NY
    4 days ago
  • $174.8k - $291.3k

     ...Opportunity As the Senior Director of Identity & Access Management (IAM), you...  ...of security engineers and...  ...to the Chief Information Security Officer...  ...in identity control frameworks and modern access...  ...and lead the cyber security metrics...  ...access policies Lead M&A identity... 
    Cyber
    Senior
    Policy

    McKesson

    New York, NY
    1 day ago
  • $174k - $220k

     ...global asset manager, founded and...  ...Information Technology...  ...Role The Senior Security Analyst will...  ...information security policies and procedures...  ...Provide cyber security subject...  ...the Associate Director Information...  ...of security frameworks, standards and controls, such as NIST... 
    Cyber
    Senior
    Policy
    Full time
    Temporary work
    Worldwide
    Flexible hours

    IFM Investors

    New York, NY
    3 days ago
  • $190k - $230k

     ...Senior Technical Program Manager, Security Risk & ComplianceNew York...  ...reporting to the Director, Security...  ...implementing controls. You'll also own policy adoption: translating...  ...assurance, cyber risk,...  ...keep delivery information current.Partner...  ...delivery tools and GRC platforms... 
    Cyber
    Senior
    Policy
    Flexible hours

    Nscale

    New York, NY
    1 day ago
  • $105.4k - $207.8k

    Position Summary Cyber SAP Security and GRC Access & Process Control Senior Consultant / Senior Engineering Management SpecialistJoin Deloitte’s Enterprise Security team and help clients strengthen SAP security across enterprise transformation, cloud modernization... 
    Cyber
    Senior
    Local area
    Visa sponsorship

    Deloitte

    New York, NY
    2 days ago
  •  ...strategy, risk management, digital identity, cyber defense, and managed security. With...  ...manage complex information security engagements...  ..., process control systems, supply...  ....Support senior leaders in advising...  ...regulatory frameworks, including...  ...Affirmative Action Policy... 
    Cyber
    Senior
    Policy
    Work experience placement
    Live in
    Work at office
    Local area
    Remote work

    Accenture

    New York, NY
    4 days ago
  •  ...Cyber Security Analyst (GRC)100% Remote (EST/CST/MST)Glint...  ...reports to the Manager, Cybersecurity Risk...  ...effortsAssess cybersecurity controls, identify gaps,...  ...risksDevelop Information Security Risk...  ...Risk Management Framework and FAIR...  ...socialize security policies, standards, and... 
    Cyber
    Policy
    Currently hiring
    Remote work

    Glint Tech Solutions LLC

    New York, NY
    4 days ago
  • $150k - $170k

     ...kJob Title: GRC Engineer (Hybrid...  ...successful Managed Service...  ...ownership of client security programs end...  ...technical controls to keep them...  ...complex cyber concepts into...  ...bridging Information Security, IT...  ...compliance frameworks, including SOC...  ...comprehensive security policies while... 
    Cyber
    Policy
    Work at office
    Remote work

    Motion Recruitment

    New York, NY
    2 days ago
  • $230k - $260k

     ...cloud, backups, security tools, and IaC,...  ...Opportunity As a Senior Technical Account Manager, you own a book...  ...advise on backup policy, immutability, isolation...  ...evidence. Build control-level evidence...  ...Experience at a cyber resilience,...  ...status, genetic information, or any other... 
    Cyber
    Senior
    Policy
    Local area
    Remote work
    Work from home

    Gambit Security

    New York, NY
    5 days ago
  • $163.4k - $322.1k

     ...strengthen physical security programs, align...  ...case and incident management, and physical security...  ...Physical Security Senior Manager works with...  ...programs, policies, standards, procedures...  ...including access control, video surveillance...  ...othersThe teamDeloitte’s Cyber Defense &... 
    Cyber
    Senior
    Policy
    Local area
    Visa sponsorship

    Deloitte

    New York, NY
    1 day ago
  • $141.92k - $212.89k

     ...independent regulator of securities firms doing...  ...sector? As a Senior Principal Risk Specialist, Cyber Engagements,...  ...and incident management improvements.What...  ...with relevant information and aligned with...  ...in which they control trading or have...  ...the company’s policy on nepotism.Search... 
    Cyber
    Senior
    Policy
    Full time
    Temporary work
    For contractors
    For subcontractor
    Local area
    Immediate start

    Financial Industry Regulatory Authority

    New York, NY
    3 days ago
  • $77k - $202k

     ...OpportunityAs a Cyber Strategy,...  ...- Senior Associate,...  ...their internal controls to mitigate...  ...solutions to manage risks for clients...  ...data and inform compliance...  ...compliance frameworks and...  ...Compliance (GRC)- Excelling...  ...following policy: more about...  ...establish a secure and trusted... 
    Cyber
    Senior
    Policy
    Full time
    H1b

    PwC

    New York, NY
    1 day ago
  • $204.8k - $425.5k

     ...The Cybersecurity Senior Manager (SM2) is...  ...driving strategic cyber solution development...  ...and implementation frameworks.Collaborate with...  ...Computer Science, Information Systems, Engineering...  ...of managed security services and security...  ...flexible vacation policy, you’ll decide how... 
    Cyber
    Senior
    Policy
    Contract work
    Summer holiday
    Immediate start
    Flexible hours

    EY (Ernst & Young)

    New York, NY
    5 days ago
  •  ...Role: Manager, Cyber Policy, Governance, Standards & Control Management within Pfizer's Cyber GRC team, leading development and oversight of enterprise...  ...establish governance frameworks develop metrics and KPIs...  ...analytical capability influencing senior leadership structured... 
    Cyber
    Policy
    Work at office
    2 days per week
    3 days per week

    Pfizer

    New York, NY
    5 days ago
  •  ...AreAccenture Security helps...  ...companies build cyber resilience to...  ...security, and managed service...  ...governance frameworks with AI co-authoring...  ...LLM Top 10 controls, prompt...  ...IAM, cloud, GRC, or offensive...  ...off. See more information on our benefits...  ...Action Policy StatementAccenture... 
    Cyber
    Senior
    Policy
    Work experience placement
    Live in
    Work at office
    Local area

    Accenture

    New York, NY
    4 days ago
  • $77k - $202k

     ...Oracle Application Security & Controls Senior Associate, you...  .... Within our Cyber, Data & Tech Risk...  ...and learn how to manage and inspire others...  ...data to inform insights and recommendations...  ...- Developing policies and guidelines...  ...and governance frameworks- Conducting compliance... 
    Cyber
    Senior
    Policy
    Full time
    H1b

    PwC

    New York, NY
    5 days ago
  • $200k - $280k

     ...Senior Director - Cyber Advisory, Risk & Compliance...  ...additional information, visit us at...  ...Archer and other GRC, security and...  ...platform teams and managed services....  ...maturity reviews, control optimization,...  ...governance, policy, controls, compliance...  ...on major frameworks and... 
    Cyber
    Senior
    Policy

    Wipro

    New York, NY
    3 hours ago
  • $77k - $202k

     ...OpportunityAs a SAP Security and Access Controls Sr Associate...  ...within our Cyber, Data & Tech...  ...practice. As a Senior Associate you...  ...complex problems, manage assigned...  ...Computer Science/Information Systems, Cybersecurity...  ...with SAP GRC, compliance...  ...the following policy: more about how... 
    Cyber
    Senior
    Policy
    Full time
    H1b

    PwC

    New York, NY
    6 hours ago
  • $195k - $275k

     ...our team as a Data Security Program Manager. Positioned to be...  ...Department in Cyber, Data, Risk and Resilience...  ..., risk and control-based programs....  ...reducing outcomes for senior leadership....  ...Strategy, applicable policy requirements, and...  ....For more information, please visit: .Employment... 
    Cyber
    Policy
    Temporary work

    Morgan Stanley

    New York, NY
    3 days ago
  • $194k - $260k

     ...Operations cyber operators, startup...  ...our common security problems:...  ...Product Manager (PM) to own...  ...ll use your GRC fluency and...  ...segments and frameworks to invest in...  ...compliance control requirements...  ...flexible vacation policy, and...  ...salary range information for this position... 
    Cyber
    Policy
    Full time
    Work at office
    Remote work
    Flexible hours

    Horizon3.ai

    New York, NY
    17 hours ago
  • $229.9k - $262.4k

    ## Sr. Manager, Cyber Security - Information Security Office ConsultantApply: McLean, VA...  ...capabilities, solutions, policies, procedures and standards...  ...experience with cybersecurity frameworks and concepts such as NIST...  ..., threat intelligence, controls and/or requirements* 6+... 
    Cyber
    Senior
    Policy
    Full time
    Part time
    H1b
    Work at office
    Local area
    Shift work

    Capital One Group

    New York, NY
    3 hours ago
  • $175k - $300k

     ...026-08-05The RoleAs a Senior Cyber Broker within Willis’...  ...threats to help clients secure optimal coverage and achieve their risk management objectives. This role...  ...carriers.Review insurance policies and provide detailed...  ...range and benefits information for this position are... 
    Cyber
    Senior
    Policy
    Temporary work
    Local area
    Visa sponsorship
    Work visa
    Flexible hours

    Willis Towers Watson

    New York, NY
    6 hours ago
  •  ...software drive Firefox: the secure, reliable connection an outside...  ...’t cover Design the safety controls: let a person approve actions...  ...you the options you need to manage your health — and your family...  ...While Mozilla’s parental leave policies vary globally, our U.S. and Canadian... 
    Senior
    Policy
    Contract work
    Temporary work
    Work at office
    Immediate start
    Remote work

    Mozilla

    New York, NY
    4 days ago
  •  ...Company is seeking a Lead GRC & Security Governance professional...  ...and lead governance frameworks for technology risk management, security assurance, and...  ...will own risk registers, control inventories, and audit readiness...  ...will define practical policies for change, incident... 
    Senior
    Policy
    Remote work

    jobgether

    New York, NY
    3 days ago
  • Job Description: Information Security Manager Position Title...  ...developing security policies, managing...  ...infrastructure from cyber threats. Key...  ...Define security frameworks, controls, and governance...  ...recommendations to senior leadership. Required...  ...Cloud Security GRC Platforms:... 
    Cyber
    Policy
    Full time
    Contract work

    Ova Technologies

    New York, NY
    2 days ago
  • $150k - $180k

     ...The ServiceNow GRC (IRM) & SecOps Product Manager is...  ...IRM/GRC) and Security Operations (SecOps...  ...and overall cyber resilience. Role...  ..., including: Policy & Compliance...  ...and continuous control monitoring. Behaviors...  ...data to make informed decisions....  ...of risk frameworks and security... 
    Cyber
    Policy
    Work experience placement
    Flexible hours

    SHI International

    New York, NY
    3 days ago

Do you want to receive more vacancies?

Subscribe and receive similar vacancies to Senior Director, Information Security Manager (Cyber GRC Frameworks/Policies/Controls). Be the first to apply!