Senior Vice President, Compliance & Control

At BNY, our culture speaks for itself, check out the latest BNY news at: BNY Newsroom & BNY LinkedIn

 Here’s a few of our recent awards:

• America’s Most Innovative Companies, Fortune, 2025
• World’s Most Admired Companies, Fortune 2025
• “Most Just Companies”, Just Capital and CNBC, 2025

Our Benefits and Rewards:

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life’s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.

BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.

In this role, you’ll make an impact in the following ways:

The role within the Risk and Compliance Assurance Testing (RCAT) function is responsible for leading an independent technology control testing activities across technology processes, systems, and control environments. The role supports the design, execution, and continuous enhancement of the RCAT testing framework to ensure testing is risk-based, and conducted in accordance with established policies, standards, and methodologies.

• Lead and execute independent testing of technology controls, including control design assessment, operating effectiveness testing, evidence review, and documentation of results.
• Support the maintenance and enhancement of testing methodologies, procedures, and standards, and recommend improvements to testing processes, controls, and governance practices as needed.
• Evaluate technology risks and control environments across key domains, including infrastructure, cybersecurity, identity and access management, change management, data management, application controls, and resilience.
• Identify control deficiencies, thematic issues, and areas of heightened risk, and provide effective challenge on remediation plans, root causes, and control improvements.
• Ensure testing workpapers, supporting documentation, and reporting outputs meet quality standards, framework requirements, and established timelines.
• Support governance and reporting processes by contributing to internal RCAT meetings, stakeholder forums, and committees, including preparation of testing results, issue themes, and management information.
• Partner with technology, business, risk, compliance, and audit stakeholders to promote transparency, coordination, and consistency in control testing and issue management activities.
• Provide guidance and support to team members on testing methodology, documentation standards, and technology risk and control expectations.
• Engage with Internal Audit and other independent risk and control functions to help streamline coverage, coordinate activities where appropriate, and communicate the status of issues, validation results, and control outcomes.

To be successful in this role, we’re seeking the following:

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, Cybersecurity, Engineering, Data Science, or a related technical discipline, or an equivalent combination of education and relevant experience.
• Significant experience in technology risk, technology controls, and/or assurance testing roles.
•Strong knowledge of technology control frameworks, regulatory expectations, and risk management practices applicable to financial services.
• Demonstrated ability to exercise sound judgment, provide credible challenge, and communicate complex control and risk matters clearly and effectively.
• Proven record of leadership and execution in control testing, technology risk, audit, or related assurance disciplines.
• Typically, 10+ years of relevant experience in technology risk, control testing, audit, cybersecurity risk, or related assurance functions.

• Proficiency in programming and scripting languages such as Java, JavaScript, C#, C++, Python, and SQL

• Strong stakeholder management and influencing skills, with the ability to provide credible challenge and partner effectively across technology, risk, compliance, audit, and business teams.
• Strong analytical and problem-solving skills, with the ability to assess control effectiveness and synthesize findings into clear, actionable insights.
• Excellent written and verbal communication skills, including the ability to prepare concise reporting for senior management and governance forums.
• Ability to manage multiple priorities, work independently, and maintain high standards of quality and consistency in a fast-paced environment.