Director, Information Security – Continuous Exposure Management

BNY

. Act as product owner for the exposure management framework .

Posted 11/4/2026full-timeLondon • United KingdomLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in product management and information security, with a strong focus on cyber security frameworks, agile delivery methodologies, and the integration of AI to enhance security processes. Proven ability to lead cross-functional teams, manage stakeholder engagement, and ensure compliance with regulatory requirements.

Highest-signal resume keywords

Product Management ExperienceCyber Security FrameworksAgile Delivery MethodologiesAI IntegrationStakeholder Engagement

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityCyber Security FrameworksAgile DeliverySprint PlanningBacklog ManagementExposure ManagementApplication Security TestingData AnalysisRisk ReductionCompliance Requirements

Soft Skills

Leadership PresenceInterpersonal SkillsInfluencing SkillsCommunication SkillsResults-Oriented Approach

Tools & Technologies

NIST CSFISO 27001CIS ControlsCTEMAutomation ToolsSecurity Solutions

Industry Keywords

Financial ServicesSecurities Industry

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Act as product owner for the exposure management framework
Set the vision, roadmap and backlog and prioritize work by risk reduction and business value
Build the case for change, align senior stakeholders and help teams adopt new ways of working
Use AI to identify, prioritize and remediate exposure
Take AI use cases from proof of concept to live service
Plan and run delivery sprints, define outcomes, manage dependencies, remove blockers and report progress
Collaborate across cyber engineering, application security, technology, risk and governance teams
Integrate new security solutions into existing frameworks, controls and workflows
Evolve processes, frameworks and technology using data, metrics and feedback
Ensure changes meet policy, regulatory and compliance requirements and controls remain effective
Analyze security data and assessments and provide senior stakeholders with insights, conclusions and actionable recommendations

Requirements

What you’ll need

Bachelor’s degree in computer science or a related discipline, or equivalent work experience required; advanced degree preferred
Extensive experience in information security or related technology
Strong understanding of cyber security frameworks such as NIST CSF, ISO 27001, CIS Controls or CTEM and related tooling and technology
Proven organizational-level product management experience, including owning a roadmap and backlog and delivering change across multiple teams
Hands-on experience running agile delivery using Scrum, Kanban or similar
Experience with sprint planning, backlog management and measuring outcomes
Experience using AI or automation to transform processes
Practical understanding of where AI adds value and where it does not
Experience in exposure or vulnerability management, application security testing or security control frameworks highly desirable
Experience in the securities or financial services industry is a plus
Strong leadership presence and interpersonal skills
Ability to influence without direct authority
Excellent communication and stakeholder engagement across time zones and cultures
Results-oriented approach focused on delivery, accountability and quality
Comfortable working at pace in a changing environment

Benefits

Comp & perks

Highly competitive compensation
Benefits and wellbeing programs
Flexible global resources and tools
Health-focused support
Personal resilience support
Financial wellbeing resources
Generous paid leaves
Paid volunteer time
Equal Employment Opportunity/Affirmative Action protections