Director, Technology and Cyber Risk Management

This exciting role entails one thing: building and sustaining credible second line of defense oversight of AI risk across BNY. Activities include, but are not limited to:

• Build, lead, and sustain the newly established AI Risk team and its operating model as AI adoption, business use cases, and the threat environment evolve.

• Provide strategic second line of defense advice and credible challenge to senior first line of defense management, including senior technologists in the AI Hub and platform leaders integrating AI into their businesses.

• Establish and evolve a proportionate enterprise AI Risk framework, including risk principles, requirements, governance, and control expectations.

• Exercise judgment and make decisions on how to achieve short- and long-term goals when raising or creating new AI risk management requirements for the business.

• Oversee AI risk identification, assessment, measurement, monitoring, governance, and issue management across the risk management lifecycle.

• Challenge AI adoption decisions and control approaches when needed, including where risk considerations may affect business priorities or delivery outcomes.

• Coordinate across Risk & Compliance and other control functions to address AI as a transversal risk and align oversight with enterprise risk management and regulatory expectations.

• Monitor changes in AI technology, business adoption, regulation, and the threat environment, and translate them into proportionate adjustments to the AI Risk program.

• Provide clear reporting and risk insights to senior leadership and governance forums on AI risk exposure, control gaps, issues, and remediation progress.

• Promote responsible AI adoption by partnering with stakeholders to enable innovation while upholding the Firm’s risk principles.

To be successful in this role, we're seeking the following:

• 10+ years of relevant experience in risk management, technology risk, cyber risk, data risk, model risk, or AI risk, including significant on-the-job risk management experience within a highly regulated financial institution.

• Strong AI risk subject matter expertise and practical knowledge of the risks and controls associated with enterprise AI adoption.

• Robust knowledge of how to apply and sustain a risk management framework across risk identification, assessment, measurement, monitoring, governance, and issue management.

• Demonstrated ability to build or materially enhance a risk program or oversight capability in a complex organization.

• Proven ability to advise, influence, and credibly challenge senior technology and business leaders, including when risk requirements may affect strategic priorities or delivery timelines.

• Strong judgment and strategic thinking, with the ability to establish proportionate requirements in a rapidly changing business, technology, and threat environment.

• Experience working across Risk & Compliance and partnering with first and second line stakeholders on transversal risk matters.

• Excellent written and verbal communication skills, with the ability to translate complex AI and risk topics into clear, decision-oriented messages.

• Relentless curiosity and a passion for enabling safe, high-impact innovation.