Director, Information Security – Continuous Exposure Management
Confirmed on the employer's own hiring board on Nov 5, 2026. First seen by Alion on Nov 4, 2026. BNY scores B on the Alion truth index.
We’re seeking a future team member for the role of Director, Information Security - Continuous Exposure Management to join our team. This role is located in London.
In this role, you’ll make an impact in the following ways:
Act as product owner for our exposure management framework. You’ll set the vision, roadmap and backlog, and prioritize work by risk reduction and business value
Use product management skills at an organizational level to drive change. That means building the case for change, aligning senior stakeholders and helping teams across the firm adopt new ways of working
Use AI to transform how we identify, prioritize and remediate exposure. You’ll find where AI can automate or speed up our processes, and take those uses from proof of concept to live service
Plan and run delivery sprints: define clear outcomes, manage dependencies, remove blockers, and report progress to stakeholders and senior leadership
Work across cyber engineering, application security, technology, risk and governance teams to achieve shared outcomes
Integrate new security solutions into existing frameworks, controls and workflows so they add value without creating friction for delivery teams
Evolve and iterate processes, frameworks and technology at pace, using data, metrics and feedback to measure impact and decide what to change next
Make sure changes meet policy, regulatory and compliance requirements, and that controls stay effective as the framework evolves
Analyze security data and assessments to give senior stakeholders insights, conclusions and actionable recommendations
To be successful in this role, we’re seeking the following:
Bachelor’s degree in computer science or a related discipline, or equivalent work experience required; advanced degree preferred
Extensive experience in information security or related technology required. This includes a strong understanding of cyber security frameworks (such as NIST CSF, ISO 27001, CIS Controls or Continuous Threat Exposure Management (CTEM)) and their related tooling and technology
Proven product management experience at an organizational level, including owning a roadmap and backlog and delivering change across multiple teams
Hands-on experience running agile delivery (Scrum, Kanban or similar), including sprint planning, backlog management and measuring outcomes
Experience using AI or automation to transform processes, with a practical understanding of where AI adds value and where it doesn’t
Experience in exposure or vulnerability management, application security testing or security control frameworks is highly desirable
Experience in the securities or financial services industry is a plus
Strong leadership presence and interpersonal skills, with the ability to influence without direct authority
Excellent communication and stakeholder engagement across time zones and cultures
Results-oriented with a focus on delivery, accountability and quality, and comfortable working at pace in a changing environment