VP, Senior Specialist - Information Security

At BNY, our culture empowers you to grow and succeed. As a leading global financial services company at the center of the world’s financial system we touch nearly 20% of the world’s investible assets. Every day around the globe, our 50,000 employees bring the power of their perspective to the table to create solutions with our clients that benefit businesses, communities and people everywhere.    

We continue to be a leader in the industry, awarded as a top home for innovators and for creating an inclusive workplace. Through our unique ideas and talents, together we help make money work for the world. This is what #LifeAtBNY is all about.

We’re seeking a future team member for the role of VP Senior Specialist, Information Security to join our Engineering, Information Security team. This role is located in Australia (Sydney) - Hybrid.

Job Purpose:

As a Senior Specialist, Information Security, you will be given the opportunity to join a team of security analysts utilizing both traditional and unconventional ways to detect, analyze, and mitigate potential intrusions and other security incidents. The candidate will join a follow the sun team currently responsible for providing investigative response for security events including but not limited to intrusion detection, malware infections, denial of service attacks, privileged account misuse and network breaches.

Candidates must be willing to work in a follow the sun SOC environment and demonstrate problem solving skills. They must also have demonstrable experience in various toolsets and best practices, be able to critically think and allow for flexible scheduling. 

In this role, you’ll make an impact in the following ways: 

• Collects, analyzes, and enriches event information and perform threat or target analysis duties.
• Interprets, analyzes, and reports all events and anomalies in accordance with Computer Network Directives, including initiating, responding, and reporting discovered events.
• Manages and executes multi-level responses and addresses reported or detected incidents.
• Coordinates and distributes directives, vulnerability, and threat advisories to identified consumers.
• Develops focused reporting and briefings for advanced cyber threats and activity to various teams and leaders.
• Provides correlation and trending of Program’s cyber incident activity.
• Improve the service level for security operations and monitoring. 
• Creating and maintaining system documentation for security event processing.
• Adhere to Standard Operating Procedures (SOPs) and training documentation.
• Work under the guidance of managers and T3 Analysts
   

To be successful in this role, we’re seeking the following: 

• Bachelor's Degree in a technical discipline with a minimum of 6 years related technical experience is required for a senior role.
• Technical certifications not required but a definite plus, from a respectable security organization (e.g. based on U.S. DOD8570 standard) ie Linux, Cisco CCNA, Microsoft Certified Azure Fundamentals, AWS Cloud Practitioner, Google Cloud, CISSP, SANS GIAC or GCIH, CEH.
• Background in hands on computer and networking experience to include an understanding of TCP/IP, routing, and major Internet protocols.
• Strong verbal and written communication skills, including the ability to provide technical thought leadership on security incident investigation calls with other technology teams, and the ability to translate complex technical concepts into plain English for consumption by non-technical audiences.
• Ability to thrive in ambiguity on situations and have attention to details.
• Self-motivated and able to work in an independent manner.
• Understanding of network, desktop and server technologies, including experience with network intrusion methods, network containment, segregation techniques and technologies such as Intrusion Detection Systems (IDS) and Intrusion Protection Systems (IPS) a plus.
• 3 years Intrusion monitoring preferred, incident response and mitigation, web application security, threat research, pen testing or intelligence analysis.
• 2 years using Splunk and/or similar SIEM experience preferred.
• Ability to read and write scripts in various languages. (python, powershell, SQL, and or similar).
• Experience and proficiency in various security tool sets and best practices.
• Candidates must be willing to work 1 weekend shift as part of their normal work week. 

At BNY, our culture speaks for itself. Here’s a few of our awards: 

• America’s Most Innovative Companies, Fortune, 2024
• World’s Most Admired Companies, Fortune 2024
• Human Rights Campaign Foundation, Corporate Equality Index, 100% score, 2023-2024
• Best Places to Work for Disability Inclusion, Disability: IN – 100% score, 2023-2024
• “Most Just Companies”, Just Capital and CNBC, 2024
• Dow Jones Sustainability Indices, Top performing company for Sustainability, 2024
• Bloomberg’s Gender Equality Index (GEI), 2023

Our Benefits and Rewards:

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life’s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter. 

BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.