{"id":1342502,"url":"https://alion.io/job/bny-senior-vice-president-senior-cloud-security-engineer","title":"Senior Vice President, Senior Cloud Security Engineer","company":{"id":1764503,"name":"BNY","domain":"bny.com","url":"https://alion.io/company/bny","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":85,"open_postings":122,"ghost_share":0,"stale_share":0.615,"repost_share":0,"time_to_fill_p50_days":57,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States","Pittsburgh, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":83000,"max":209000,"currency":"USD","period":"year","gross":null,"usd_annual":209000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bicep","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"CloudFormation","optional":false},{"name":"Configuration Management","optional":false},{"name":"GCP","optional":false},{"name":"GitLab","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Lacework","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"PowerShell","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Python","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-05-01T21:20:31Z","employer_posted_date":"2026-05-01","last_verified_at":"2026-10-30T00:07:56Z","board_verified":true,"closed_at":null,"days_open":181,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":180},"description":"Senior Cloud Security Engineer\nAt BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.\nRecognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance - and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.\nWe are seeking a Senior Vice President, Cloud Security Engineer to join our Cloud Security team and lead the implementation of security controls across cloud platforms and cloud-native services, support Cloud Security Strategy and Governance.\nThis role combines deep expertise in cloud security engineering with strong knowledge of AI-driven technologies and their practical application in cyber security.\nIt is responsible for advancing secure cloud capabilities through technical leadership, posture management, and close partnership with engineering, architecture, DevSecOps, IAM, and cyber teams.\nThe ideal candidate brings strong hands-on experience securing cloud workloads across one or more major cloud platforms, understands security control frameworks including NIST SP 800-53, and can translate cloud security requirements into technical controls and measurable operational outcomes. Also required is solid knowledge of Cloud Security Posture Management (CSPM), including tools such as Wiz and native cloud policy and monitoring services. This role is in New York, NY or Pittsburgh, PA\nWhat to expect\nBe part of a team focused on strengthening enterprise cloud security capabilities across public cloud and cloud-native environments.\nContribute to the implementation of secure cloud design patterns, technical standards, and control requirements.\nPartner closely with cloud engineering, DevSecOps, IAM, platform teams, and cyber stakeholders.\nGain experience across cloud security engineering, automation, posture management, and governance support.\nHelp translate cloud security requirements into practical technical controls and repeatable implementation patterns.\nSupport cloud security strategy and governance through engineering execution, control adoption, and reporting inputs.\nIn this role, you’ll make an impact in the following ways\nLead the engineering, implementation, and continuous improvement of cloud security controls for identity and access management, network security, encryption, key management, secrets management, logging, monitoring, and workload protection in AWS, Azure, or GCP.\nAct as an AI enabler for cloud security by identifying, assessing, and promoting AI use cases that improve security outcomes.\nSupport the adoption of AI-driven capabilities for threat detection, risk analysis, automation, incident response, and security operations.\nTranslate security and control requirements into repeatable engineering solutions and implementation standards.\nSupport the design and implementation of technical controls aligned to NIST SP 800-53 and related enterprise security requirements.\nLead implementation efforts for container, Kubernetes, API, and cloud-native workload security controls.\nDrive the operational maturity of Cloud Security Posture Management (CSPM) capabilities to identify misconfigurations, policy violations, excessive permissions, exposed assets, and control drift.\nPartner with engineering and cyber teams to optimize Wiz and similar CSPM/CNAPP platforms, including workflow integration, prioritization, remediation support, and reporting.\nDesign and strengthen the use of cloud-native posture and policy services, including AWS Config, AWS Security Hub, AWS Organizations SCPs, Azure Policy, Microsoft Defender for Cloud, GCP Organization Policy, and Security Command Center.\nDefine and implement policy-as-code, automated guardrails, and infrastructure-as-code patterns to improve control consistency and reduce manual processes.\nProvide senior technical guidance to cloud engineers, DevSecOps practitioners, and application teams on secure cloud implementation practices.\nPartner with cloud architects and governance stakeholders to improve standards adoption, exception handling, and control coverage.\nHelp define cloud security metrics, remediation priorities, and technical reporting that support governance and risk management objectives.\nContribute to audit, regulatory, and control review activities by explaining technical implementations, evidence, and remediation status.\nMaintain and improve documentation for cloud security standards, design patterns, engineering procedures, and operating guidance.\nTo be successful in this role, we’re seeking the following\n6-10 years of experience in cloud security engineering, security engineering, DevSecOps, infrastructure security, or a related security engineering role. \nStrong hands-on experience securing workloads and services in AWS, Azure, or GCP. \nStrong knowledge of cloud security principles across IAM, networking, encryption, secrets management, logging, workload protection, resilience, and secure service consumption. \nAI enabler for cloud security by identifying, assessing, and promoting AI use cases that improve security outcomes.\nExperience with security automation, orchestration, analytics, and AI-driven security tooling.\nExperience implementing cloud security controls at scale in enterprise or regulated environments. \nStrong familiarity with NIST SP 800-53, MCSB and related control concepts, especially in areas such as: Access Control (AC), Audit and Accountability (AU), Configuration Management (CM), Identification and Authentication (IA), Incident Response (IR), Risk Assessment (RA), System and Communications Protection (SC), System and Information Integrity (SI) \nStrong understanding of Cloud Security Posture Management (CSPM) concepts, including continuous compliance monitoring, misconfiguration detection, exposure analysis, and governance workflows. \nExperience with CSPM/CNAPP tools such as Wiz, Prisma Cloud, Orca, Lacework, or similar platforms. \nExperience with cloud-native policy and posture tools, such as:AWS Config \nAWS Security Hub \nAWS Organizations SCPs \nAzure Policy \nMicrosoft Defender for Cloud \nGCP Organization Policy \nGoogle Security Command Center \n\nExperience developing or supporting policy-as-code and automated guardrails using tools such as OPA/Rego or equivalent policy frameworks. \nStrong experience with Infrastructure as Code and automation using Terraform, CloudFormation, ARM, Bicep, Python, or similar tooling. \nExperience with container and Kubernetes security, API security, vulnerability management, and cloud-native control implementation. \nExperience supporting or contributing to cloud security strategy, governance processes, standards, exception handling, remediation tracking, and risk reporting. \nStrong technical judgment, problem-solving ability, and cross-functional collaboration skills. \nStrong written and verbal communication skills, including the ability to explain technical controls in business and risk terms. \nBachelor's degree in computer science, engineering, cybersecurity, or related discipline, or equivalent practical experience.\nExperience in a regulated industry such as financial services. \nFamiliarity with CIS Benchmarks, CSA CCM, OWASP, or NIST CSF. \nExperience supporting remediation workflows tied to cloud security findings. \nExposure to architecture review, risk assessments, or cloud governance processes. \nRelevant certifications such as:AWS Security Specialty \nAzure Security Engineer Associate \nGoogle Professional Cloud Security Engineer \nCCSP \n\nLead the implementation and improvement of cloud security controls across supported cloud platforms.\nImplement and maintain cloud security controls across supported platforms with Cloud native policies, WIZ rules.\nAble to fluently work with KQL, WIZ, Splunk, Azure Policies, bash, Powershell, gcloud, Terraform, Log Analytics, Microsoft Sentinel, Gitlab - All development tools fluently in an enterprise setting.\nImplement and mature cloud controls aligned to NIST SP 800-53 and enterprise requirements. \nStrengthen technical traceability, evidence support, and control consistency. \nIdentify, prioritize, and help remediate control gaps across cloud environments. \nWork with platform, DevOps, architecture, and application teams to embed security into engineering workflows. \nPromote adoption of automated controls, secure design patterns, and policy enforcement. \nProvide senior-level technical guidance that improves secure cloud adoption at scale.\nPreferred qualifications Core responsibilities by domain Cloud security engineering Security controls and framework alignment Engineering partnership Risk and governance\nSupport in review high-risk cloud initiatives and document residual risk, exceptions, and compensating controls. \nSupport governance forums, audits, and regulatory reviews with defensible engineering rationale. \nBalance security, resilience, cost, and engineering usability in decision making. \nCloud security strategy and governance\nSupport cloud security strategy and governance through technical leadership, control implementation, and reporting inputs.\nContribute to standards adoption, remediation governance, exception handling, and security maturity efforts.\nPartner with stakeholders to improve control effectiveness and support risk-based decision-making.\nCloud security posture management\nDrive posture management processes across third-party and cloud-native capabilities. \nImprove detection, prioritization, and remediation of misconfigurations, policy violations, and exposure risks. \nHelp operationalize Wiz or similar tooling alongside native cloud policies and governance workflows. \nAI Enablement for Cloud Security\nAct as an AI enabler by identifying opportunities to apply AI to strengthen cloud security outcomes. \nSupport implementation of AI capabilities to improve threat detection, posture analysis, risk prioritization, and security operations efficiency. \nHelp streamline cloud security tooling, processes, and workflows through intelligent automation and AI-driven insights. \nPartner with engineering, platform, and security teams to embed AI capabilities into cloud security operations and decision-making. \nPromote practical and responsible use of AI as a force multiplier for cloud security effectiveness, scalability, and operational maturity\nWhat success looks like:\nCloud security controls are implemented consistently, effectively, and at scale. \nAI is integrated into all processes and controls in suppor to increase controls effectiveness and streamline operational efforts\nSecurity is embedded into engineering and deployment workflows with reduced manual effort. \nPosture management findings are better prioritized, more actionable, and more effectively remediated. \nWiz, cloud-native policies, and automation capabilities work together to improve visibility and reduce cloud risk. \nCloud control implementations demonstrate alignment to NIST SP 800-53 and enterprise standards. \nEngineering teams adopt secure patterns more consistently with fewer design and control exceptions. \nGovernance and audit stakeholders receive clearer technical support, evidence, and remediation transparency.\nAt BNY, our culture speaks for itself, check out the latest BNY news at:\nBNY Newsroom\nBNY LinkedIn\nHere’s a few of our recent awards:\nAmerica’s Most Innovative Companies, Fortune, 2025\nWorld’s Most Admired Companies, Fortune 2025\n“Most Just Companies”, Just Capital and CNBC, 2025\nOur Benefits and Rewards:\nBNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-pe...","description_format":"text","description_chars":13405,"description_truncated":true,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Financial Services","Natural Language Processing","Property & Casualty Insurance"],"lifecycle":[{"event":"open","at":"2026-09-27T15:58:04Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.479,"p_room":0.28,"age_days":180,"expected_fill_days":57,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":209000,"is_top_pay":false},"html_url":"https://alion.io/job/bny-senior-vice-president-senior-cloud-security-engineer","json_url":"https://alion.io/job/bny-senior-vice-president-senior-cloud-security-engineer.json","meta":{"generated_at":"2026-10-30T02:57:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3873,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1764503},"rest":"https://alion.io/mcp/rest/get_company?id=1764503"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbny-senior-vice-president-senior-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbny-senior-vice-president-senior-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbny-senior-vice-president-senior-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bny-senior-vice-president-senior-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbny-senior-vice-president-senior-cloud-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1342502}},{"tool":"search_jobs","arguments":{"company":"bny.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1342502},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}