Mainframe Security Analyst (contract)

At BNY, our culture empowers you to grow and succeed. As a leading global financial services company at the center of the world’s financial system we touch nearly 20% of the world’s investible assets.

We continue to be a leader in the industry, awarded as a top home for innovators and for creating an inclusive workplace. Through our unique ideas and talents, together we help make money work for the world. This is what #LifeAtBNY is all about.

Job Summary:

BNY's Information Security organization is seeking a Mainframe Security Analyst to support ongoing vulnerability management and z/OS hardening efforts. The Security Analyst III will play a key tactical and analytical role on a project designed to strengthen mainframe security posture across the enterprise.

This role requires deep technical expertise in z/OS mainframe environments—particularly ACF2, TSS, or RACF—as well as hands-on experience using zSecure Audit for vulnerability detection, analysis, and remediation reporting. The ideal candidate will bring both strong analytical skills and the ability to communicate effectively across security and engineering teams.

This is a hybrid role expecting 4-days on-site in Lake Mary, FL or Pittsburgh, PA.

Key Responsibilities:

• Execute day-to-day vulnerability management tasks within mainframe environments.
• Run and analyze zSecure scans; identify privileged access, user IDs, and potential vulnerabilities.
• Write detailed reports and recommend remediation actions based on findings.
• Serve as a subject matter expert for Mainframe Security Systems (ACF2, TSS, RACF).
• Provide project documentation, assist with asset modeling, and guide internal stakeholders on mainframe security standards.
• Conduct z/OS hardening leveraging STIG guidelines and internal security controls.
• Support and train client teams on the organization’s home-grown vulnerability management tool.
• Collaborate with mainframe engineering and information security teams to address findings and implement mitigations.
• Participate in team meetings, JIRA/Confluence documentation, and knowledge sharing.

Qualifications:

• 5–10 years of experience in Mainframe Security, z/OS environments, and zSecure Audit experience.
• Deep understanding of ACF2, TSS, or RACF for access control and vulnerability analysis.
• Ability to leverage STIG standards in z/OS hardening efforts.
• Hands-on experience running batch scans with JCL and interpreting outputs.
• Strong communication skills and the ability to document findings clearly.
• Bachelor’s degree or 15+ years of equivalent Mainframe Security experience.

Preferred Skills:

• z/OS security consulting or penetration testing background.
• Working knowledge of CARLa (zSecure programming language).
• Experience with Vulnerability Management tools, JIRA, Confluence, or SharePoint.
• Financial services or large-enterprise IT background.
• Positive, collaborative attitude—able to ramp up quickly and work independently once trained.

Why Join Us:

This is an excellent opportunity to work on critical infrastructure that powers one of the world’s largest financial institutions. Be part of a specialized, high-impact security team responsible for protecting enterprise-level mainframe systems.

At BNY, our culture speaks for itself. Here’s a few of our awards:

• America’s Most Innovative Companies, Fortune, 2024
• World’s Most Admired Companies, Fortune 2024
• Human Rights Campaign Foundation, Corporate Equality Index, 100% score, 2023-2024
• Best Places to Work for Disability Inclusion, Disability: IN – 100% score, 2023-2024
• “Most Just Companies”, Just Capital and CNBC, 2024
• Dow Jones Sustainability Indices, Top performing company for Sustainability, 2024
• Bloomberg’s Gender Equality Index (GEI), 2023