Information Security III (contract)

at  BNY Mellon

• Consults on a senior level and provides professional support for major components of the company’s information security infrastructure. Contributes to the development and implementation of security architecture, standards, procedures and guidelines for multiple platforms in diverse system environments. Consults with the business and operational infrastructure personnel regarding new and existing technologies. Recommends new security tools to management and reports and provides guidance and expertise in their implementation. Reviews and analyzes highly complex data and information to provide insights, conclusions and actionable recommendations. Defines, implements, and applies area-wide security and/or COB policies and standards by leveraging in-depth knowledge of globally accepted information security and/or COB principles. Addresses high risk security concerns or incidents. Recommends course of action to mitigate risk and ensures that appropriate standards are established and published. Contributes to the achievement of area objectives.
• Bachelor’s degree in computer science or a related discipline, or equivalent work experience required, advanced degree preferred
• 10-12 years of experience in information security or related technology experience required
• Experience in the securities or financial services industry is a plus
• Cloud Vulnerability compliance; understanding cloud architecture and design with emphasis on vulnerability management, discovery, remediation, and general security operations practices with a focus on cloud IaaS / PaaS / SaaS and their native security platforms on cloud providers such as AWS, Google Cloud Platform, Microsoft Azure (including Sentinel)
• Ability to design attribution practices and processes to cloud assets via integration to company inventory
• Strong knowledge of large-scale cloud (public or private) environments, enterprise cloud environments, cloud policy and policy as code highly preferred
• Experience in designing and development of automation tools and infrastructure to run service-oriented stacks on an internal data centers

Please refer the Job description for details