Job Description

The Director, Technology Risk Management is a leadership role within the global Technology Risk function of BNY Mellon. This is a 2nd line risk function accountable for oversight and credible challenge of the Americas regional Technology department and the Lines of Business to ensure effective management of their technology risks.
S/he will have strong technical subject matter expertise with architecting/design and rollout of enterprise wide programs in relevant areas such as Digital, Cloud, Cybersecurity, Agile, Data Management, etc. and be comfortable with challenging / suggesting alternative methods of approaching technology risk remediation within the domain to strengthen the front line.

Responsibilities:

t
* Assesses 1st Line of defense compliance with the enterprise level Technology Risk Framework and delivering proactive management of technology risk facing the BNY Mellon lines of business (including Technology).
t
* Applies understanding of systems architecture, hardware, operations, system life cycle, information security, investigative principles, incident response procedures, computer forensics and information security practices to anticipate technology risks inherent to the assigned business area, areas or region.
t
* Leads the assessment, monitoring and reporting on technology risks inherent to business activities, including cyber, information security and technology risk concepts.
t
* Interprets and drives enforcement of technology risk policies, standards, and regulatory requirements
t
* Interprets industry experience to determine appropriate key metrics (KRIs, KPIs) and best practices that drive technology risk and regulatory compliance.
t
* Accountable for the integrity of the business area, areas or regions' adherence to the technology risk management framework.
t
* Leads efforts to develop a strong technology risk culture and to influence and ensure business and regional adherence to the technology risk management framework.

Qualifications

Bachelor s degree or the equivalent combination of education and experience is required. 12-15 years of total work experience preferred. Experience in Technology, Information Security and/or technology risk preferred. Knowledge of security systems and applications preferred. At least one security clearance preferred.