Director, Technology Controls Management Framework

Pittsburgh, PA, United States办公方式未标注

全职

薪资未披露

🛡 岗位真实性核验

Ghost Job 检测

🛡 申请链接核验有效

信号由后台自动核验生成，仅供参考；判断权在你。设计案：GHOST-JOB-P1

🎯

必备技能

AIAutomationCisspCloudISO 27001ITILNistObservability增长安全

免费注册后解锁"你的匹配分 vs 高分画像"与个人技能缺口。

💼

职位描述

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.We are seeking a future team member for the role of Director, Technology Controls Management Framework to join our Engineering Control Services team. This role is located in Pittsburgh, PA with consideration also given to candidates located in Lake Mary, FLPosition SummaryThe Director, Technology Controls Management Framework is responsible for the stewardship, evolution, and continuous improvement of the Technology Controls Management Framework across the Technology organization.Partnering with leaders across Infrastructure, Cybersecurity, Data, Software Engineering, Artificial Intelligence, Enterprise Risk, Internal Audit, and enterprise governance functions, this role establishes the methodologies, governance practices, and engineering principles that enable technology controls to be designed, implemented, measured, and continuously improved in a consistent, risk-based manner.While accountability for the design and operation of individual technology controls remains within the respective technology organizations, this role is responsible for defining the framework within which those controls are developed. This includes establishing common methodologies, governance standards, control design principles, measurement practices, and alignment with recognized industry frameworks to ensure Technology maintains a coherent, sustainable, and auditable control environment.This is a highly collaborative leadership role requiring strong influence, systems thinking, and the ability to drive enterprise-wide consistency without direct ownership of the underlying technology organizations.In this role, you’ll make an impact in the following ways:<ul style="list-style-type: disc;"><li>Technology Controls Management Framework: Lead the evolution and maturity of the Technology Controls Management Framework, including governance model, taxonomy, lifecycle, and methodologies, while ensuring traceability across Technology risks, policies, standards, controls, evidence, testing, and control effectiveness measures. Maintain a framework that is practical, scalable, and responsive to evolving business, regulatory, and technology risk requirements.</li><li>Policy & Standards Governance: Author and govern centrally owned Technology policies, standards, methodologies, and supporting documentation, and provide oversight across Infrastructure, Cybersecurity, Data, Software Engineering, Artificial Intelligence, and other Technology organizations. Ensure policies and standards translate into well-designed, measurable, and operationally effective controls.</li><li>Control Design & Engineering: Define enterprise expectations and minimum engineering standards for Technology control design, including automation, evidence, ownership, monitoring, testability, and measurable outcomes. Lead governance reviews of new and modified controls and drive simplification, standardization, and continuous improvement across the Technology control environment.</li><li>Control Effectiveness & Measurement: Establish methodologies and standards for measuring Technology control effectiveness, including KPIs, KCIs, KRIs, evidence collection, monitoring, testing, and control health reporting. Advance automation, observability, and data-driven measurement to improve control performance and reduce operational overhead.</li><li>Industry Alignment & Continuous Improvement: Align the Technology Controls Management Framework to leading industry frameworks including COBIT, NIST, ISO 27001, and other applicable standards. Conduct benchmarking and recommend strategic enhancements to strengthen the maturity, consistency, and effectiveness of the Technology control environment.</li><li>Governance Leadership & Partnership: Build strong partnerships with Technology leadership, Enterprise Risk, Compliance, Internal Audit, and enterprise governance organizations. Provide expertise on Technology governance, controls methodology, and control design, while supporting audit and regulatory responses through collaboration and practical problem solving.</li></ul> To be successful in this role, we’re seeking the following:Required Qualifications / Experience<ul style="list-style-type: disc;"><li>Bachelor's degree or equivalent combination of education and work experience required. </li><li>10+ years of progressively responsible experience in Technology Governance, Technology Risk, Information Security Governance, Controls Management, Operational Risk, or related disciplines.</li><li>Demonstrated experience designing, implementing, or maturing enterprise governance or controls frameworks.</li><li>Experience working within large, complex, highly regulated organizations.</li><li>Strong understanding of Technology controls across infrastructure, cybersecurity, software engineering, cloud platforms, data, and emerging technologies.</li><li>Experience working with Internal Audit, Enterprise Risk, regulators, and senior Technology leadership.</li></ul> Preferred Qualifications<ul style="list-style-type: disc;"><li>Experience with COBIT, NIST Cybersecurity Framework, ISO 27001, ITIL, or comparable governance frameworks.</li><li>Experience developing governance policies, standards, or enterprise methodologies.</li><li>Professional certifications such as CGEIT, CRISC, CISA, CISSP, or equivalent.</li></ul>

🈯 翻译这份 JD · 红灯 0 / 黄灯 0 / 绿灯 0点开 ▾

没扫到常见信号词。这份 JD 直白得不常见——面试里照常确认节奏、汇报线和薪酬范围就好。

没扫到常见信号词——这份 JD 直白得不常见。照常确认节奏、汇报线和薪酬范围。

词典只标"常见信号"，不对公司下结论——红灯 = 面试里该当面确认的问题。想自己翻别的 JD：JD 翻译器 →

🏢

公司 · Company

BNY

在招78个岗位

Pittsburgh, PA, United States来源：ATS 官方

⚑ 岗位信息收录自公开招聘页（ATS 官方），以雇主官网为准