data engineer

software engineer

ai engineer

associate, information security Jobs in New York

associate, information security

chief information security officer Jobs in New York

chief information security officer

cybersecurity engineer cryptography director

Morgan Stanley

<div>We're seeking someone to join our PKI and Secrets Management team as a Cybersecurity engineer with a strong focus on both engineering and operations in Data Protection Services department to design, implement, and support enterprise cryptographic solutions, including Public Key Infrastructure (PKI), Hardware Security Modules (HSM), certificate lifecycle and secrets management tools.
 
 
In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities.
This is an engineering position at Director level, which is part of the job family responsible for engineering and operations of cryptographic solutions and also responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities. 
 
Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.
 
 
What you'll do in the role:
<ul><li>Communicate regularly with product leads across the organization and discuss opportunities for improvement to existing and future technology solutions.
</li><li>Design, implement, and maintain enterprise cryptographic infrastructure, including PKI, HSMs, and certificate management platforms.
</li><li>Manage the full certificate lifecycle (issuance, renewal, revocation, and deployment) to ensure security, availability, and compliance.
</li><li>Engineer and support secure key management solutions leveraging HSMs, including key generation, storage, rotation, and backup.
</li><li>Monitor and operate cryptographic services in a 24/7 environment (on call rotations), ensuring high availability, incident response, and performance optimization.
</li><li>Automate certificate and key management processes to reduce manual effort and minimize operational risk.
</li><li>Collaborate with application, infrastructure, and security teams to integrate cryptographic controls into enterprise systems and cloud environments.
</li><li>Support the evaluation, design, and adoption of Post-Quantum Cryptography (PQC) capabilities, including PQC-enabled PKI environments, crypto-agility strategies and transition planning What you'll bring to the role:
</li><li>Ability to effectively manage multiple functions and initiatives.
</li></ul>What you will bring :
<ul><li>Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
</li><li>5+ years of hands-on experience in cybersecurity engineering or operations, with exposure to cryptographic services (PKI, HSMs, certificate management).
</li><li>Strong understanding of cryptographic principles, protocols, and standards (e.g., TLS, X.509, key exchange, encryption algorithms).
</li><li>Proven experience managing PKI environments and certificate lifecycle tools in enterprise and/or cloud environments.
</li><li>Hands-on experience with HSM technologies and key management practices, including secure key generation, storage, rotation, and backup.
</li><li>Familiarity with automation and scripting (e.g., Python, PowerShell, or similar) to streamline certificate and key management processes.
</li><li>Knowledge of emerging cryptographic trends, including Post-Quantum Cryptography (PQC) and crypto-agility concepts; relevant certifications such as CISSP, CISM, or vendor-specific PKI/HSM certifications are preferred.
</li></ul>We are committed to maintaining the first-class service and high standard of excellence that have defined Morgan Stanley for over 89 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren&rsquo;t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you&rsquo;ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There&rsquo;s also ample opportunity to move about the business for those who show passion and grit in their work. To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.
WHAT YOU CAN EXPECT FROM MORGAN STANLEY:
At Morgan Stanley, we raise, manage and allocate capital for our clients &ndash; helping them reach their goals. We do it in a way that&rsquo;s differentiated &ndash; and we&rsquo;ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren&rsquo;t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you&rsquo;ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There&rsquo;s also ample opportunity to move about the business for those who show passion and grit in their work.
To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.
Expected base pay rates for the role will be between 120,000 and 165,000 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long-term incentive packages, and other Morgan Stanley sponsored benefit programs.
Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.
Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.
For more information, please visit : https://www.morganstanley.com/people-opportunities/eeo .</div>

Cybersecurity Engineer - Cryptography - Director

TSR Consulting

<div>
 
 
 Director of Information Security
 
 
 
 
 Location: NYC (2 days hybrid onsite)
 
 
 
 
 Direct-Hire
 
 
 
 
 
 Reporting to the SVP of Technology, the Director of Information Security is a key leadership role in enabling and maintaining a stable, scalable, and secure ecosystem while ensuring that our business and customer data is protected and available. This position is responsible for leading and managing all functions within the Information Security Program that involves developing the strategic roadmap and overseeing the effective daily operations of the Security Program concerning Security Engineering, Operations, Governance, Risk, and Compliance.
 
 
 
 
 The Director of Information Security will drive the development and implementation of security controls, create security policies, manage vendor risks, raise cyber security awareness, monitor and respond to security incidents, and ensure data security, classification, and compliance are maintained.
 
 
 
 
 This position will also be responsible for the administration, implementation, and oversight of all IT Information Security and Data Protection strategies for the organization to ensure alignment with relevant laws, regulations, and industry standards.
 
 
 
 
 Job Responsibilities (primary and secondary duties):
 
 <ul>
 <li>
 Develop and execute the strategic roadmap for the security program, including security engineering, operations, governance, risk, and compliance. Focusing on fostering a culture of accountability and customer service.
 </li>
 <li>
 Establish, implement, and oversee a comprehensive program to ensure the integrity, confidentiality, and availability of data. This includes staying current on security trends and the threat landscape, as well as maintaining and enhancing existing cybersecurity tools.
 </li>
 <li>
 Create high-quality documentation for the strategic security vision, including blueprints, standards, and frameworks that align with business goals.
 </li>
 <li>
 Manage cybersecurity risks and ensure all security strategies aligned with relevant laws, regulations, and industry standards. This also involves overseeing cybersecurity compliance and leading security awareness and data privacy training programs.
 </li>
 <li>
 Act as the primary escalation point for all security incidents, including those involving third parties. Lead the response and containment efforts for any breaches and ensure that the organization can effectively detect, protect, respond, and recover from threats.
 </li>
 <li>
 Oversee information security projects, ensuring they are appropriately resourced and delivered on time, within scope, and on budget.
 </li>
 <li>
 Responsible for managing vendor risks as part of the Information Security Program. Actively engage with vendors to understand their security roadmaps, technology directions, and investments aimed at enhancing security capabilities.
 </li>
 </ul>
 
 
 
 
 
 Job Requirements:
 
 
 
 
 
 
 
 
 Experience:
 
 
 <ul>
 <li>
 10+ years of progressive IT experience with at least 7 years in cybersecurity and 3+ years of management experience is required.
 </li>
 <li>
 Demonstrated expertise in implementing and defining IT control frameworks and security controls such as NIST CSF, CIS as well as OWASP.
 </li>
 <li>
 Deep technical knowledge of modern hosting, computing, and data delivery platforms, with a strong emphasis on security, is a must.
 </li>
 <li>
 Proven ability to manage vendor relationships and govern third-party risks, ensuring their security practices align with organizational needs.
 </li>
 <li>
 Deep and hands-on expertise in Microsoft-based cloud security products and services is required, along with familiarity in other cloud environments like AWS.
 </li>
 <li>
 Proficiency with Data Loss Prevention (DLP) tools, including network, endpoint, and cloud-based solutions, is required. You must also have strong knowledge of cryptographic services and experience with the development of risk reduction strategies through technical and non-technical controls.
 </li>
 <li>
 Strong knowledge of EDR, MDR, vulnerability management, and penetration testing is essential. Experience with SIEM, IPS/IDS, and Threat Intelligence tools is required for monitoring and analysis. The ideal candidate must act as the primary escalation point for all security incidents, including those involving third parties, and lead the response and containment of any breaches.
 </li>
 <li>
 The ability to plan for and execute recovery procedures following a security incident is essential.
 </li>
 <li>
 A strong understanding of global data privacy regulations and guidelines, such as GDPR and CCPA, is critical.
 </li>
 <li>
 The ideal candidate must be skilled in drafting security standards, reference architectures, policies, procedures, and implementation guidelines.
 </li>
 <li>
 Demonstrated understanding of technological trends and developments in the areas of information security, risk management, compliance controls, and cybersecurity best practices.
 </li>
 <li>
 Experience in managing department budgets and recruiting staff is required.
 </li>
 <li>
 The ideal candidate must be able to dive deep with the team and provide hands-on guidance to ensure proper project delivery.
 </li>
 </ul>
 
 
 
 
 
 Education &amp; Certifications:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Engineering, Computer Science, or related field and/or related experience.
 </li>
 <li>
 Professional security management certification such as CISSP, CISM, CISA, CompTIA Security +, or other similar credentials, preferred.
 </li>
 </ul>
 
 
 
 
 
 Skills and Attributes:
 
 
 <ul>
 <li>
 The ability to articulate complex cybersecurity issues and recommendations to non-technical stakeholders is crucial. This is particularly important for gaining support and funding from leadership and for creating effective security awareness training programs.
 </li>
 <li>
 The ability to develop a strategic vision and roadmap for the security program that aligns with overall business objectives. This goes beyond day-to-day technical tasks and requires forward-looking, high-level planning.
 </li>
 <li>
 Experience with project management methodologies like Agile or Waterfall, as well as the ability to manage scope, timelines, and budgets.
 </li>
 <li>
 \The ability to collaborate effectively with different departments, including IT, legal, and operational teams, is critical for successful security implementation. The security leader must be seen as a partner, not a roadblock.
 </li>
 <li>
 Attention to detail is vital for drafting security policies, analyzing logs, and identifying potential vulnerabilities.
 </li>
 <li>
 The role requires excellent analytical skills to solve complex problems, especially during a security incident. The ability to perform root cause analysis (RCA) and develop effective remediation plans is a key skill.
 </li>
 <li>
 Experience with Identity Management and Active Directory supporting SSO and MFA, OAuth and SAML based authentication, role-based access control, and identity federation such as Okta, EntraID, SailPoint, or similar platforms.
 </li>
 <li>
 Working knowledge of EDR/MDR and Endpoint Management platforms such as CrowdStrike, Sophos, SentinelOne, Microsoft Defender, or similar services.
 </li>
 <li>
 Experience with Vulnerability Management tools and ASV services such as Rapid 7, Qualys, Tenable or similar.
 </li>
 <li>
 Strong understanding of network protocols, firewalls, VPN&rsquo;s, IDS/IPS, and other common security technologies including Cisco, Meraki, Fortinet, Palo Alto, etc.
 </li>
 <li>
 Working knowledge of Email Security platforms such as CheckPoint, Proofpoint, Microsoft 365, Mimecast, or similar.
 </li>
 <li>
 Experience with GRC platforms to manage governance processes such as Drata, Vanta, OneTrust, or similar.
 </li>
 <li>
 Knowledge and practical application of auditing various information security/risk management frameworks.
 </li>
 </ul>
 
 
</div>

Director of Information Security

Lead Edge Capital

<div>
 
 The Firm
 
 
 
 Lead Edge Capital is a $9 billion growth equity firm backing software, internet, and tech-enabled businesses around the world. Since 2011, we&rsquo;ve partnered with over 100 companies, including Alibaba, Asana, Toast, Duo Security, Wise, and Benchling, and have seen more than 60 successful exits. We look for companies where our network can make a difference, and where speed, access, and execution matter. We&rsquo;re powered by a global network of 700+ operators, executives, and entrepreneurs who do more than commit capital. They help our companies hire, grow, and win. Lead Edge has offices in New York, London, and Santa Barbara.
 
 
 
 Overview
 
 
 
 We are seeking an experienced and strategic
 
 VP/Director of Information Technology (IT)
 
 to lead all aspects of the &filig;rm&rsquo;s technology infrastructure, systems, technical support and data environment. This individual will ensure that our IT platform supports a dynamic, data-driven investment organization and adheres to the highest standards of security, compliance, and innovation. The ideal candidate will bring both strategic vision and hands-on leadership, ideally with experience in &filig;nancial services, private equity, or other professional services environments.
 
 
 
 Key Responsibilities
 
 
 
 
 Infrastructure &amp; Systems Management
 
 
 
 <ul>
 <li>
 Oversee all aspects of IT infrastructure, including networks, cloud platforms, devices, telecommunications, and enterprise applications.
 </li>
 <li>
 Manage system integrations, migrations, and ongoing maintenance for key platforms (CRM, data rooms, work&fllig;ow tools, accounting systems, etc.).
 </li>
 <li>
 Ensure business continuity through proactive monitoring, disaster recovery planning, and process documentation.
 
 
 </li>
 </ul>
 
 Vendor &amp; Partner Management
 
 
 
 <ul>
 <li>
 Manage relationships with all third-party technology providers, MSPs, MSSPs and software vendors.
 </li>
 <li>
 Negotiate contracts, evaluate vendor performance, and ensure service levels and cost efficiency.
 </li>
 <li>
 Lead procurement, licensing, and renewal cycles across the &filig;rm.
 
 
 </li>
 </ul>
 
 Support &amp; Operations
 
 
 
 <ul>
 <li>
 Lead the IT support function to provide high-quality, responsive assistance to employees.
 </li>
 <li>
 Work with the MSP to escalate employee technical issues as needed.
 </li>
 <li>
 Oversee onboarding/offboarding processes, device management, and user training.
 </li>
 <li>
 Continuously improve IT processes, service delivery, and system performance.
 
 
 </li>
 </ul>
 
 Technology Strategy &amp; Leadership
 
 
 
 <ul>
 <li>
 Develop and execute the &filig;rm&rsquo;s comprehensive IT strategy in alignment with business objectives and regulatory requirements.
 </li>
 <li>
 Serve as a trusted technology advisor to &filig;rm leadership on emerging technologies, cybersecurity, data governance, and digital transformation.
 
 
 </li>
 </ul>
 
 Data Management &amp; Mapping
 
 
 
 <ul>
 <li>
 Design and maintain a comprehensive data architecture and governance framework.
 </li>
 <li>
 Oversee data mapping across systems to ensure accuracy, consistency, and compliance with privacy regulations.
 </li>
 <li>
 Partner with investment teams to improve data accessibility, reporting quality, and interoperability.
 </li>
 <li>
 Maintain documentation of data &fllig;ows and ensure appropriate access and control mechanisms.
 
 
 </li>
 </ul>
 
 Cybersecurity &amp; Compliance
 
 
 
 <ul>
 <li>
 Establish and maintain a robust cybersecurity program, including policies, tools, and training.
 </li>
 <li>
 Oversee security assessments, penetration testing, and vendor risk reviews.
 </li>
 <li>
 Ensure compliance with applicable data protection and &filig;nancial regulations (e.g., SEC, GDPR, CCPA).
 
 
 </li>
 </ul>
 
 Arti&filig;cial Intelligence Strategy &amp; Oversight
 
 
 
 <ul>
 <li>
 Serve as the &filig;rm&rsquo;s internal AI expert and policy lead, overseeing responsible AI adoption and governance.
 </li>
 <li>
 Develop, implement, and monitor AI usage policies to ensure compliance, ethical standards, and data privacy.
 </li>
 <li>
 Evaluate and integrate AI tools that enhance operational efficiency, data analytics, and deal processes.
 </li>
 <li>
 Stay current with advancements in AI and machine learning and advise leadership on emerging opportunities and risks.
 
 
 </li>
 </ul>
 
 Quali&filig;cations
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Technology, Computer Science, or related &filig;eld.
 </li>
 <li>
 7-10+ years of progressive IT management experience, ideally within private equity, venture capital, or &filig;nancial services.
 </li>
 <li>
 Strong technical knowledge of cloud platforms (Microsoft 365, Azure, AWS), cybersecurity, and enterprise systems.
 </li>
 <li>
 Experience managing data governance, vendor relationships, and system integrations.
 </li>
 <li>
 Familiarity with AI applications, governance, and security implications.
 </li>
 <li>
 Excellent communication, leadership, and project management skills.
 </li>
 <li>
 Proven ability to balance strategic direction with hands-on execution.
 
 
 </li>
 </ul>
 
 Compensation
 
 
 
 <ul>
 <li>
 The budgeted base salary range is $225,000-$250,000. Total compensation will include base salary and performance-based bonus. Total package will be commensurate with qualifications and experience and will be highly competitive relative to market. Actual pay will be adjusted based on experience.
 </li>
 </ul>
</div>

VP/Director of Information Technology

CVS Health

<div>We&rsquo;re building a world of health around every individual &mdash; shaping a more connected, convenient and compassionate health experience. At CVS Health&reg;, you&rsquo;ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger &ndash; helping to simplify health care one person, one family and one community at a time.
Position Summary
The Staff Engineer, Regulatory Technology Engineering is responsible for the development and delivery of technology solutions that support the strategic direction of technology compliance and audit management for CVS Health&rsquo;s Digital, Data, Analytics &amp; Technology (DDAT) Compliance organization. This role applies deep technical expertise to design, modernize, and operationalize technology solutions that support SOX, SOC 1, SOC 2, PCI, HITRUST, NIST 800‑53, NYDFS, and other cybersecurity and regulatory frameworks.
The role partners closely with engineering teams, process and control owners, and security architects to develop robust, audit‑ready control environments and automate evidence collection for complex, modern technology stacks, including cloud‑native platforms, distributed systems, AI/ML solutions, and DevSecOps implementations. This role requires an engineering mindset and the ability to translate regulatory requirements into scalable technical controls, automated testing approaches, and measurable compliance indicators.
You will contribute to the development and continuous improvement of compliance tooling, control processes, dashboards, and metrics. Additionally, you will collaborate with IT, business partners, Learning and Development, Internal Audit, Legal, and external assessors to ensure alignment, transparency, and consistent execution of the technology compliance program.<div></div>
Required Qualifications<ul><li>
7+ years of software engineering or software development experience, with a strong understanding of modern architectures and engineering practices</li><li>
7+ years of technical project leadership experience, supporting engineering initiatives on cross‑functional teams in highly collaborative environments</li><li>
5+ years of experience in internal audit, external assessments, risk management, regulatory compliance, or information security within a corporate environment</li><li>
5+ years of experience with audit methodologies, internal control frameworks, risk assessments, and control testing techniques, with the ability to apply them to cloud and modern technology environments</li><li>
3+ years of hands‑on experience with cloud security engineering, architecture, and/or automation, including designing or evaluating technical controls in cloud‑native platforms (AWS, Azure, GCP)</li></ul><div></div>
Preferred Qualifications<ul><li>
Strong understanding of the software development lifecycle (SDLC) and secure development practices</li><li>
Experience with AI/ML platforms, tools, and related risk considerations</li><li>
Understanding of regulatory frameworks and security standards such as NIST, ISO, HITRUST, HIPAA, PCI, SOC 1/SOC 2, and SOX, with the ability to interpret and translate requirements into technical solutions</li><li>
Experience with DevOps/DevSecOps, CI/CD pipelines, infrastructure‑as‑code, and modern cloud infrastructure and cybersecurity patterns</li><li>
Ability to document and translate complex technical requirements for development team consumption</li><li>
Strong attention to detail with exceptional analytical and problem‑solving skills; able to evaluate technical systems, identify risks, and propose pragmatic solutions</li><li>
Demonstrated ability to influence across engineering, security, and business teams, building strong relationships with technical and non‑technical stakeholders</li><li>
Excellent written and verbal communication skills, capable of explaining complex technical and regulatory concepts in a clear and concise manner</li><li>
Experience working with risk management frameworks and identifying cybersecurity risks in modern technology environments</li><li>
Strong program management skills, including strategic planning, road‑mapping, and technical project execution</li><li>
Industry experience in Healthcare, Insurance, or Retail is a plus</li><li>
Relevant certifications such as CCSK, CCSP, CISSP, CRISC, or similar credentials</li></ul><div></div>
Education<ul><li>
Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Engineering, or equivalent experience (High School Diploma and 4+ years of relevant experience).</li></ul>
Pay Range
The typical pay range for this role is:
$106,605.00 - $284,280.00 
This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company&rsquo;s equity award program. 
Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.
Great benefits for great people
We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families. 
This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility. 
Additional details about available benefits are provided during the application process and on Benefits Moments. 
We anticipate the application window for this opening will close on: 05/04/2026
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.</div>

Staff Engineer - Regulatory Technology

JPMorganChase

<div>JOB DESCRIPTION 
If you are ready to lead the way in technology innovation at JPMorganChase, we&rsquo;ve got an exciting opportunity for a technology leader like you to make a real difference in the industry.
As a Senior Director of Architecture at JPMorganChase within Connected Commerce Technology you lead across multiple areas, manage the activities of multiple departments, and collaborate across both business and technical domains in the Architecture function to execute critical initiatives of the function. Your expertise is applied cross-functionally to drive the adoption and implementation of technical methods within various teams and aid the firm in remaining at the forefront of industry trends, best practices, and technological advances.
Job responsibilities<div>
</div><ul><li>Define target state architectures, reference implementations, and modernization plans
</li><li>Lead architecture for core capabilities such as: sign-in, MFA, step-up auth, device binding, session management, identity proofing, account recovery, credential lifecycle, and fraud signals/decisioning.</li><li>
Design secure APIs and event-driven patterns enabling reusable trust services across channels (web, mobile, call center, partners).</li><li>
Embed security controls into designs: least privilege, strong cryptography, secrets management, key rotation, secure enclaves/HSM integration where needed.</li><li>
Ensure compliance with privacy and data minimization principles; define data classification, retention, and access patterns.</li><li>
Drive non-functional requirements: availability, performance, latency budgets, disaster recovery, and operational readiness.</li><li>
Architect risk engines and policy frameworks that support adaptive authentication (step-up) and real-time fraud controls.</li><li>
Enable explainable decisioning, model governance hooks, and experimentation (A/B, canary) without compromising controls.</li><li>
Leverage AI &amp; ML to better protect customers and reduce fraud losses</li><li>
Define identity models (customer, account, device, session), correlation strategies, and identity graph patterns.</li><li>
Ensure interoperability with standards and integrations (e.g., OIDC/OAuth2/SAML/FIDO2/WebAuthn) and external identity providers/partners.</li></ul>
<div>Required qualifications, capabilities, and skills<div>
</div><ul><li>Formal training or certification on Architecture concepts and 10+ years applied experience. In addition, 5+ year of experience leading technologists to manage, anticipate and solve complex technical items within your domain of expertise and more broadly across the organization</li><li>
Proven experience architecting authentication, identity and access management, or fraud/risk systems in secure, regulated, or high-availability environments.</li><li>
Knowledge of authentication and authorization patterns and protocols such as OAuth2, OIDC, SAML, and token/session management.</li><li>
Experience with modern authentication methods, including FIDO2, WebAuthn, multi-factor authentication, and device intelligence.</li><li>
Understanding of distributed systems, including microservices, service mesh concepts, event streaming, idempotency, and consistency.</li><li>
Experience in data architecture for security domains, including feature stores, signals pipelines, real-time decisioning, and logging/auditing.</li><li>
Strong leadership and stakeholder management skills.</li><li>
Demonstrated ability to drive transformation and lead cross-functional teams.</li></ul>
</div><div></div><div>Preferred qualifications, capabilities, and skills<ul><li>
Experience working at code level</li></ul></div>
ABOUT US 
Chase is a leading financial services firm, helping nearly half of America&rsquo;s households and small businesses achieve their financial goals through a broad range of financial products. Our mission is to create engaged, lifelong relationships and put our customers at the heart of everything we do. We also help small businesses, nonprofits and cities grow, delivering solutions to solve all their financial needs.
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants&rsquo; and employees&rsquo; religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
Equal Opportunity Employer/Disability/Veterans 
 
 
ABOUT THE TEAM 
 
Our Consumer &amp; Community Banking division serves our Chase customers through a range of financial services, including personal banking, credit cards, mortgages, auto financing, investment advice, small business loans and payment processing. We&rsquo;re proud to lead the U.S. in credit card sales and deposit growth and have the most-used digital solutions &ndash; all while ranking first in customer satisfaction.</div>

Sr. Director of Architecture - Trust & Security

ISMG Careers

<div><h4 class="jobSectionHeader">About Us</h4>
ISMG is a global intelligence firm and media powerhouse, leading the way in cybersecurity, enterprise IT, and digital transformation. With 10+ brands, 38 digital media properties, and over 400 premier events annually&mdash;ISMG connects a network of over 2M executives, decision-makers, and innovators with the insights and opportunities they need to stay ahead. 
 
We are entering an extraordinary growth phase&mdash;expanding our editorial depth and global reach. If you&rsquo;re passionate about shaping narratives that influence the world of cybersecurity and financial services, this is your moment to lead.<h4 class="jobSectionHeader">
The Opportunity</h4>
ISMG is building a high-performing news desk to cover the most important cybersecurity and AI developments in real time.
We&rsquo;re seeking a General Assignment Reporter to support daily coverage across our global publications&mdash;reporting on breaking news, emerging threats, and major industry developments as they happen.
This is a fast-paced, execution-focused role ideal for a reporter who:<ul><li>
Thrives on a variety of beats</li><li>
Moves quickly without sacrificing accuracy</li><li>
Takes pride in keeping an expert audience informed</li></ul>
You&rsquo;ll work closely with editors and senior correspondents to ensure ISMG delivers timely, high-quality coverage across a rapidly evolving landscape.<h4 class="jobSectionHeader">
What You&rsquo;ll Do</h4><ul><li>
Monitor and report on breaking news across cybersecurity and AI, publishing timely stories each day as events warrant</li><li>
Cover critical vulnerabilities (CVEs) and translate technical disclosures into clear, actionable reporting</li><li>
Report on data breaches, ransomware incidents, and major security events as they unfold</li><li>
Track law enforcement actions (arrests, takedowns, indictments, etc.) and summarize developments</li><li>
Monitor earnings calls and announcements from major cybersecurity and AI vendors to surface market trends and business intelligence relevant to our readers</li><li>
Identify cybersecurity angles in global and geopolitical developments</li><li>
Support senior editors and reporters by quickly advancing stories and filling coverage gaps</li></ul><h4 class="jobSectionHeader">
What We&rsquo;re Looking For</h4><ul><li>
2&ndash;8 years of reporting experience, ideally in technology, cybersecurity, AI or related business news</li><li>
Strong news judgment and ability to prioritize under pressure</li><li>
Ability to write clearly, accurately, and quickly for a sophisticated technical audience</li><li>
Comfort operating as a generalist across multiple topics and beats</li><li>
Familiarity with/basic understanding of cybersecurity fundamentals (CVE, ransomware, threat actors, etc.)</li><li>
Ability to take direction and operate in a high-output newsroom environment</li><li>
AI-savvy mindset, open to and proactive about using AI tools to streamline research, reporting, and editing&mdash;while maintaining strong editorial standards and accuracy</li></ul>
Nice to have:<ul><li>
Experience covering breaking news or working on a news desk</li><li>
Exposure to financial reporting, regulatory coverage, or earnings calls</li></ul><h4 class="jobSectionHeader">
Why This Role Matters</h4>
The volume of critical cybersecurity news continues to grow&mdash;and timely, accurate reporting is essential for the professionals who rely on ISMG. This role is central to ensuring we deliver fast, reliable, and high-quality coverage at scale, while building the next generation of editorial talent within our organization.<h4 class="jobSectionHeader">
Why ISMG?</h4><ul><li>
Work with purpose in a mission-driven, innovative media environment</li><li>
Be part of a globally recognized editorial team with unmatched access to resources</li><li>
Do journalism that genuinely matters to the people who defend our critical systems</li><li>
Develop deeper subject matter expertise within global cybersecurity</li><li>
The opportunity to advance in your career, building sources and owning coverage areas over time</li></ul>
Ready to be part of something bigger? Apply now or visit ISMG.io to learn more!</div>

General Assignment Reporter, Cybersecurity News Desk

New York University

Position Summary: The Director of Identity Governance Administration serves as a senior leader within NYU&rsquo;s Identity and Access Management (IAM) team, overseeing the strategy, operations, and advancement of the university&rsquo;s Identity Governance Administration program. This position leads a team of technical professionals responsible for managing NYU&rsquo;s identity lifecycle processes, SailPoint platform, access governance practices, and role‑based access models. The Director ensures that identity governance supports secure, efficient, and compliant access to NYU systems across a global environment. This role contributes to university‑wide technology initiatives, strengthens NYU&rsquo;s overall security posture, and ensures that identity processes align with institutional goals. A strong background in quality assurance and testing is essential to ensure the reliability and integrity of IAM solutions. The IAM team operates within NYU&rsquo;s broader Global Office of Information Security. Qualifications: Required Education: 
Bachelor's Degree in information technology, computer science, cybersecurity, or a related field. 
 
Preferred Education: 
Advanced degrees or relevant professional certifications are valued. 
 
Required Experience: 
7+ years relevant experience or equivalent combination of education and experience. Must include experience designing and implementing complex systems including knowledge of all phases of software development life cycle. Knowledge of and experience with Internet technologies, applications, database services, programming languages and operating systems. 
 
Preferred Experience: 
Strong leadership abilities with the capacity to guide technical teams and influence decision‑making across a complex, global organization. Demonstrated expertise in identity governance, access management, and information security principles. Strong analytical and communication skills with the ability to translate technical concepts for diverse audiences. 
 
Required Skills, Knowledge and Abilities: 
Significant experience managing or leading Identity and Access Management programs within large or distributed environments. Hands‑on experience with SailPoint or comparable identity governance platforms including lifecycle management, role engineering, and access certification processes. Proven background in quality assurance and testing methodologies with the ability to design and oversee validation frameworks for IAM systems. Experience collaborating with cross‑functional teams and supporting enterprise‑level technology initiatives. Demonstrated ability to manage complex projects, prioritize competing demands, and deliver results in a dynamic environment. 
 
Preferred Skills, Knowledge and Abilities: 
Experience developing or refining access control models. Familiarity with cloud identity services and integrations across hybrid environments. Strong problem‑solving skills with the ability to assess risks, identify improvements, and implement effective solutions. Ability to build strong partnerships with stakeholders and communicate clearly in both technical and non‑technical settings. 
Additional Information: In compliance with NYC's Pay Transparency Act, the annual base salary range for this position is USD $180,000.00 to USD $220,000.00. New York University considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and organizational considerations when extending an offer. This pay range represents base pay only and excludes any additional items such as incentives, bonuses, clinical compensation, or other items.
 
 
NYU aims to be among the greenest urban campuses in the country and carbon neutral by 2040. Learn more at nyu.edu/nyugreen. 
 
NYU is an Equal Opportunity Employer and is committed to a policy of equal treatment and opportunity in every aspect of its recruitment and hiring process without regard to age, alienage, caregiver status, childbirth, citizenship status, color, creed, disability, domestic violence victim status, ethnicity, familial status, gender and/or gender identity or expression, marital status, military status, national origin, parental status, partnership status, predisposing genetic characteristics, pregnancy, race, religion, reproductive health decision making, sex, sexual orientation, unemployment status, veteran status, or any other legally protected basis. All interested persons are encouraged to apply at all levels.

Director, Identity and Access Management Services

Explore 548+ Cybersecurity engineer cryptography director in New York this May. Find roles across top companies and apply now to boost your career.