Senior Associate, Infrastructure Services Analyst

About the role

We’re seeking a future team member for the role of Senior Associate, Infrastructure Services to join our Production Services Governance team. This role is located in NY/PGH/Lake Mary.

Responsibilities

• Support the governance, oversight, and continuous improvement of BNY's Technology Enterprise Change Management (TECM) Framework / Secure Systems & Software Development Lifecycle (SSSDLC), Request for Change (RFC), Incident (INC), Availability (AVL), and Problem Management (PRB) processes.
• Partner across Engineering, Production Services, Risk, and Audit teams to strengthen control effectiveness, drive audit readiness, ensure regulatory sustainability, and advance strategic modernization initiatives through automation and AI-enabled capabilities.
• Champion the adoption of BNY's AI capabilities—including Digital Engineer, Windsurf, Eliza, and Microsoft Copilot—to transform day-to-day governance, risk management, policy oversight, and control BAU.
• Identify opportunities to embed AI throughout the Secure System & Software Development Lifecycle (SSSDLC), enabling teams to improve requirements quality, development efficiency, testing effectiveness, control compliance, and production resiliency.
• Drive the use of AI for governance activities including policy analysis, control monitoring, audit evidence collection, risk assessments, issue management, reporting, and regulatory preparedness.
• Leverage AI-assisted insights to proactively identify control gaps, emerging risks, recurring issues, and opportunities for process simplification and automation.
• Partner with Engineering and senior technology leaders to drive strategic governance forums that support enterprise decision-making and oversight.
• Support governance for the Technology & Cyber Resiliency Council, Technology & Cyber Resiliency Forum, Production Services Governance Forum, and Enterprise Software Delivery Council (ESDC).
• Lead the development of the monthly Technology & Cyber Resiliency Newsletter.
• Maintain 30+ TECM/SSSDLC/RFC and 6 INC/AVL/PRB policy, standard, and procedure documents. Ensure alignment and traceability across policies, standards, procedures, and associated controls.
• Drive ongoing maturity of TECM/SSSDLC and INC/AVL/PRB Risk & Control Self-Assessments (RCSA).
• Oversee monitoring and governance of 62 SSSDLC and 8 Vulnerability Management controls.
• Identify, analyze, and escalate control deviations requiring platform remediation.
• Coordinate remediation across high-priority audit findings impacting software delivery, testing, requirements management, and data governance.
• Perform control effectiveness reviews and monthly sampling to validate framework compliance and operational execution.
• Advance automation and AI-enabled capabilities to reduce manual effort and improve scalability.
• Support development and execution of the TECM/SSSDLC and INC/AVL/PRB strategic roadmap.
• Assess current-state frameworks against industry standards, regulatory expectations, and emerging market practices.
• Identify opportunities to streamline processes, modernize controls, and leverage automation and AI.
• Manage intake, requirement refinement, and prioritization of ServiceNow enhancements supporting Change Management, Permit-to-Operate (PTO), Incident Management, Problem Management, Business Impact Management, Knowledge Management.
• Maintain a prioritized backlog aligned to business objectives and delivery capacity.
• Ensure user stories, requirements, acceptance criteria, and dependencies are clearly defined before development.

Requirements

• 2–5 years of experience in technology, operations, risk, governance, audit, or control functions within Financial Services.
• Strong analytical, problem-solving, and stakeholder management skills.
• Ability to drive cross-functional initiatives and deliver results in a fast-paced environment.
• Excellent written and verbal communication skills, including executive-level reporting.
• Passion for continuous improvement, automation, AI, and process optimization.
• Experience working in regulated or complex enterprise environments.

Preferred Qualifications

• Experience in technology governance, SSSDLC, change management, production services, technology risk, or controls.
• Strong understanding of TECM/SSSDLC, Incident, Problem, and Change Management processes.
• Ability to partner across multiple stakeholders to drive governance and strategic outcomes.
• Experience supporting audit remediation, regulatory initiatives, control monitoring, and continuous improvement.
• Strong analytical, communication, and stakeholder management skills.
• Experience leveraging AI, automation, and data-driven insights to modernize governance and risk management.

Leadership Scope

• Influence and collaborate across multiple Engineering stakeholder groups.
• Drive governance, transformation, and continuous improvement initiatives.
• Champion innovation, automation, and operational excellence.