Senior Security Analyst (contract)

At BNY, our culture allows us to run our company better and enables you to grow and succeed. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators and champions of inclusion, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what is all about. Join us and be part of something extraordinary.

Job Summary:

We are seeking a Security Analyst to support enterprise cyber control effectiveness and application security posture at BNY. This role will focus on identifying control gaps, driving vulnerability remediation, and partnering with application teams to improve adherence to cybersecurity policies and standards across the organization. The position combines analytical investigation, stakeholder engagement, and project coordination to ensure applications remain compliant with evolving security requirements. This is a Pittsburgh-based role with a hybrid schedule (4 days onsite, 8:00 AM – 5:00 PM ET).

Key Responsibilities:

• Cyber Hygiene & Control Oversight: Support 27 cyber control domains by assessing application compliance, identifying gaps, and escalating risk where controls are not effectively implemented.
• Vulnerability & Risk Remediation: Drive remediation efforts across application teams, track aging vulnerabilities, manage exceptions, and promote continuous improvement in cyber hygiene practices.
• Data Analysis & Reporting: Analyze complex datasets, produce dashboards and ad hoc reporting, and synthesize findings into clear remediation plans and leadership updates.
• Stakeholder Engagement & Governance: Partner with Information Security, IAM, and cross-functional technology teams to enforce standards, remove roadblocks, and ensure alignment with risk and compliance requirements.
• Project Coordination & Issue Resolution: Identify operational blockers, coordinate countermeasures, and maintain momentum on remediation initiatives while monitoring shifting remediation statuses and deadlines.
• Application Advisory & Coaching: Educate and guide application owners on security expectations, hygiene weaknesses, and sustainable control practices through targeted outreach and awareness efforts.
  
  

Qualifications:

• Bachelor’s degree in Computer Science or related discipline (advanced degree preferred) or equivalent experience
• Experience with asset/configuration management, vulnerability management, and identity & access management
• Strong analytical mindset with the ability to synthesize automated and self-identified risk findings
• Familiarity with GRC and information security practices; financial services experience is a plus
• Proficiency with data analysis and reporting tools such as SQL, Power BI, Tableau, Qlik, Business Objects, DB2, and advanced Excel/PowerPoint
• Understanding of SDLC and its impact on security controls and governance
• Strong communication, stakeholder management, and independent decision-making skills
  
  

Preferred Experience:

• Logical and physical database design experience and comfort working with complex data environments
• Exposure to enterprise cyber control frameworks and application security governance
• Background in engineering, development, architecture, or systems analysis demonstrating strong technical curiosity and problem-solving ability
• Project management experience supporting remediation initiatives and cross-team coordination
  
  

Why Join Us:

This role offers the opportunity to work at the intersection of cybersecurity, analytics, and enterprise technology governance within a highly collaborative environment. You’ll partner with hundreds of technologists across cybersecurity and application teams, gaining exposure to diverse technologies while directly influencing the organization’s security posture. The position is ideal for naturally inquisitive technologists who enjoy investigating complex problems, engaging stakeholders, and driving measurable risk reduction across large-scale platforms. With strong mentorship and a structured onboarding approach focused on learning the environment and control landscape, this role provides meaningful growth for candidates looking to deepen their cybersecurity and enterprise risk expertise.

At BNY, our culture speaks for itself, check out the latest BNY news at:

BNY Newsroom

BNY LinkedIn

Here’s a few of our recent awards:

America’s Most Innovative Companies, Fortune, 2025

World’s Most Admired Companies, Fortune 2025

“Most Just Companies”, Just Capital and CNBC, 2025

Pay Rate Range

54.4 - 68 USD hourly

Additional Notes

Applications will be accepted on an ongoing basis.

This posting is for a contract assignment with Tundra Technical Solutions to provide services to Bank of New York (BNY). Please note that this is not a full-time employment opportunity. Candidates selected for this role will be engaged as contractors for the specified duration of the project. For any inquiries regarding the terms of the contract or engagement, please contact Tundra Technical Solutions directly.

Benefits Information

Optional benefits offering include medical, dental, vision and retirement benefits via Tundra Technical Solutions.