Vice President, Information Security

Endpoint Security Engineer

At BNY, our culture allows us to run our company better and enables employees' growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world's investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators and champions of inclusion, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

We're seeking a future team member for the role of Endpoint Security Engineer to join our Cyber team. This role is in Pittsburgh and requires presence in the office 4 days per week.

Role Overview

The Endpoint SecurityEngineer is responsible for the engineering, configuration, and operational support of endpoint security capabilities across user endpoints and server assets, including physical and virtual environments.

This role provides hands-on technical depth across the endpoint security ecosystem, supports policy and architectural direction, identifies gaps and emerging risks, and contributes to the long-term roadmap for tooling and capabilities across the enterprise.

Key Responsibilities

Enterprise Endpoint Security Visibility & Coordination

• Maintain a comprehensive, current-state understanding of endpoint security posture across workstations, laptops, and server assets in on premises and virtualized environments.
• Partner with technology, cybersecurity, risk, and platform teams responsible for endpoint and server security capabilities.
• Provide integrated views and insights into coverage, maturity, and alignment across the endpoint security portfolio.

Policy, Standards, & Architecture Leadership

• Contribute to the development and evolution of enterprise endpoint security standards and reference architectures spanning both user endpoints and server environments.
• Partner with enterprise architecture and control teams to define target-state capabilities and consistent security expectations across heterogeneous endpoint platforms.
• Ensure architectural direction reflects evolving threats, regulatory expectations, and enterprise technology strategy.
• Design, implement, and maintain endpoint security configurations, policies, and detection rules across enterprise tooling platforms. (added)

Gap Identification, Risk Transparency & Escalation

• Identify material gaps, misalignments, or risk concentrations across endpoint and server security capabilities.
• Coordinate stakeholders to assess issues, align on remediation approaches, and elevate risks appropriately through governance channels.
• Support leadership and risk forums with clear articulation of endpoint security posture and priority concerns.

Strategic Roadmap & Capability Planning

• Contribute to the endpoint security strategic roadmap, encompassing capability evolution, technology lifecycle planning, and portfolio rationalization.
• Evaluate and recommend tool selection, capability introduction, and de-duplication across endpoint and server security platforms.
• Support investment planning and sequencing to ensure endpoint security capabilities advance cohesively and at enterprise scale.
• Perform hands-on engineering work including tool deployment, integration, tuning, and troubleshooting across endpoint and server security platforms. (added)

Qualifications

• 6+ years of experience in cybersecurity or infrastructure with demonstrated depth and breadth in endpoint security concepts and enterprise tooling ecosystems.
• Bachelor's degree required, Master's degree preferred
• Ability to collaborate effectively and drive alignment across diverse technical and organizational stakeholders.
• Strong understanding of security architecture, control frameworks, and endpoint engineering best practices.
• Hands-on experience with endpoint security platforms such as CrowdStrike, Microsoft Defender, or equivalent EDR/EPP solutions. (added)
• Excellent communication and synthesis skills, capable of producing clear technical documentation and executive-ready insights.

At BNY, our culture speaks for itself, check out the latest BNY news at:

BNY Newsroom

BNY LinkedIn

Here's a few of our recent awards:

• America's Most Innovative Companies, Fortune, 2025
• World's Most Admired Companies, Fortune 2025
• "Most Just Companies", Just Capital and CNBC, 2025

Our Benefits and Rewards:

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life's journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.

BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.

**POSITION SUMMARY:** The Vice President, Information Security plays a pivotal role in safeguarding BNY's information assets by developing, implementing, and managing security strategies. This position is crucial in upholding BNY's Principles of trust and integrity, ensuring that security measures align with the organization's Strategic Pillars. As an Individual Contributor, the Vice President is responsible for leveraging their expertise in the Information Security field to mitigate risks and enhance the protection of sensitive data across the company. This role supports the broader mission of BNY by maintaining a secure and resilient digital environment, fostering an organizational culture of security awareness. **PRIMARY RESPONSIBILITIES:** - Develop and implement comprehensive information security strategies by applying advanced knowledge of security protocols and risk management. - Conduct regular security assessments and audits by utilizing industry-standard practices to identify vulnerabilities and recommend improvements. - Collaborate with cross-functional teams to integrate security measures into business processes, ensuring seamless protection of digital assets. - Monitor emerging security threats and trends, providing expert insights to proactively address potential risks. - Lead incident response efforts by coordinating with relevant stakeholders to ensure timely resolution and mitigation of security breaches. - Educate and train employees on security best practices, fostering a culture of security awareness across the organization. **EDUCATION/QUALIFICATIONS:** - Bachelor's degree in Information Security, Computer Science, or a related field - Advanced certifications such as CISSP or CISM are preferred **EXPERIENCE:** Typically 6-10 years of experience **SKILLS:** - Strong analytical and problem-solving skills, with the ability to assess complex security challenges - Excellent communication and collaboration capabilities to work effectively with various teams - Proficiency in security tools and technologies, demonstrating expertise in the Information Security domain