Vice President, Information Security

Bring your ideas. Make history. 
BNY Mellon offers an exciting array of future-forward careers at the intersection of business, finance, and technology. We are one of the world's top asset management and banking firms that manages trillions of dollars in assets, custody and/or administration. Known as the “bank of banks” - 97% of the world’s top banks work with us as we lead and serve our customers into the new era of digital. 

With over 239 years of rich history and industry firsts, BNY Mellon has been built upon our proven ability to evolve, lead, and drive new ideas at every turn. Today, we’re approximately 50,000 employees across 35 countries with a culture that empowers you to grow, take risks, experiment and be yourself. This is what #LifeAtBNYMellon is all about. 

We welcome you to apply! When applying to this general posting, our expert BNY Mellon Talent Acquisition Team may also review your resume for consideration across other open roles within the company. 

We’re seeking a future team member for the role of Vice President, Information Security to join our Engineering team. This role is located in Sydney – HYBRID.

Job Purpose:

As a Senior Cyber Threat Analyst, you will be given the opportunity to join a team of security analysts about both traditional and unconventional ways to detect, analyze, and mitigate potential intrusions and other security incidents. The candidate will join a follow the sun team currently responsible for providing investigative response for security events including but not limited to intrusion detection, malware infections, denial of service attacks, privileged account misuse and network breaches.

Candidates must be willing to work in a SOC environment, demonstrate strong problem solving skills, have demonstrable experience in various toolsets and best practices, able to critically think, and allow for flexible scheduling. 

In this role, you’ll make an impact in the following ways: 

• Collects, analyzes, and enriches event information and perform threat or target analysis duties.
• Interprets, analyzes, and reports all events and anomalies in accordance with Computer Network Directives, including initiating, responding, and reporting discovered events.
• Manages and executes multi-level responses and addresses reported or detected incidents.
• Providing reporting and metrics around security monitoring by designing dashboards for asset owners and management consumption.
• Coordinates and distributes directives, vulnerability, and threat advisories to identified consumers.
• Develops focused reporting and briefings for advanced cyber threats and activity to various teams and leaders.
• Provides correlation and trending of Program’s cyber incident activity.
• Create AARs and document TTPs, with the ability to do deep dive investigations on complex incidents.
• Improve the service level for security operations and monitoring. Creating and maintaining system documentation for security event processing.
• Author Standard Operating Procedures (SOPs) and training documentation.
• Act a SME and trainer to T2 and T1 personal as needed.

To be successful in this role, we’re seeking the following: 

• Candidates must be willing to work 1 weekend shift as part of their normal work week
• Bachelor's Degree in a technical discipline with a minimum of 8 years related technical experience is required for a senior role.  An additional 2 years of experience may be substituted in lieu of a degree or relevant professional certifications
• Must have at least two (2) certifications, from a respectable security organization (e.g. based on U.S. DOD8570 standard)
• Background in hands on computer and networking experience to include an understanding of TCP/IP, routing, and major Internet protocols.
• Understanding of network, desktop and server technologies, including experience with network intrusion methods, network containment, segregation techniques and technologies such as Intrusion Detection Systems (IDS) and Intrusion Protection Systems (IPS).
• 5 years Intrusion monitoring, incident response and mitigation, web application security, threat research, pen testing or intelligence analysis.
• Ability to read and write scripts in various languages. (php, ksh, python, powershell, SQL, and or similar)
• 5 years using Splunk, ArcSight and/or similar SIEM experience.
• Strong verbal and written communication skills, including the ability to provide technical thought leadership on security incident investigation calls with other technology teams, and the ability to translate complex technical concepts into plain English for consumption by non-technical audiences.
• Ability to thrive in ambiguity on situations and have attention to detail.
• Self-motivated and able to work in an independent manner.
• Experience and proficiency in various security tool sets (including BNYM’s existing tool sets) and best practices an added advantage

At BNY Mellon, our inclusive culture speaks for itself. Here’s a few of our awards: 

• Fortune World’s Most Admired Companies & Top 20 for Diversity and Inclusion 
• Bloomberg’s Gender Equality Index (GEI)
• Human Rights Campaign Foundation, 100% score Corporate Equality Index
• Best Places to Work for Disability Inclusion, Disability: IN – 100% score 
• 100 Best Workplaces for Innovators, Fast Company
• CDP’s Climate Change ‘A List’

Our Benefits: 

BNY Mellon offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life’s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves that can support you and your family through moments that matter. 

BNY Mellon is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.