Director, Information Security Program Manager

BNY is seeking a Director, Information Security Program Manager to lead the creation, authorization, and continuous governance of a FedRAMP-compliant Azure Government tenant supporting government payment transaction services. The role owns boundary definition, ATO readiness, ongoing compliance operations, and coordination across security, engineering, risk/compliance, legal, and external partners.

• Own end-to-end FedRAMP High program for an Azure Government tenant supporting government transactions
• Lead ATO readiness and maintain FedRAMP artifacts including SSP and POA&M
• Drive governance and operating mechanisms across engineering, cloud platform, information security, risk/compliance, legal, payment operations, and 3PAOs
• Manage evidence management, change control, and control attestation workflows aligned to FedRAMP requirements
• Conduct gap analyses against NIST SP 800-53 and ensure traceability and remediation planning

This position focuses on FedRAMP High compliance for Azure Government/GCC High constructs, including SSP and associated FedRAMP appendices, POA&M, boundary diagrams, and data flows. It requires performing gap analyses against NIST SP 800-53, driving remediation, and maintaining traceability from control narratives to technical and process evidence while ensuring continuous monitoring and control attestation.

The ideal candidate is a senior information security program leader who has owned FedRAMP compliance end-to-end for an Azure Government tenant, including ATO readiness and continuous monitoring. They bring strong governance experience across security, risk/compliance, engineering, and external assessment partners, with demonstrated control traceability to NIST SP 800-53 evidence.