Senior Associate, Infrastructure Services Analyst

• Responsible for supporting the governance, oversight, and continuous improvement of BNY’s Technology Enterprise Change Management (TECM) Framework /Secure Systems & Software Development Lifecycle (SSSDLC), Request for Change (RFC), Incident (INC), Availability (AVL), and Problem Management (PRB) processes
• Partner across Engineering, Production Services, Risk, and Audit teams to strengthen control effectiveness, drive audit readiness, ensure regulatory sustainability, and advance strategic modernization initiatives through automation and AI-enabled capabilities
• AI, Automation & Governance Modernization
• Champion the adoption of BNY’s AI capabilities - including Digital Engineer, Windsurf, Eliza, and Microsoft Copilot - to transform day-to-day governance, risk management, policy oversight, and control BAU
• Identify opportunities to embed AI throughout the Secure System & Software Development Lifecycle (SSSDLC), enabling teams to improve requirements quality, development efficiency, testing effectiveness, control compliance, and production resiliency
• Drive the use of AI for governance activities including policy analysis, control monitoring, audit evidence collection, risk assessments, issue management, reporting, and regulatory preparedness
• Leverage AI-assisted insights to proactively identify control gaps, emerging risks, recurring issues, and opportunities for process simplification and automation
• Governance Forums & Executive Reporting
• Partner with Engineering and senior technology leaders to drive strategic governance forums that support enterprise decision-making and oversight
• Support governance for the Technology & Cyber Resiliency Council, Technology & Cyber Resiliency Forum, Production Services Governance Forum, and Enterprise Software Delivery Council (ESDC)
• Lead the development of the monthly Technology & Cyber Resiliency Newsletter
• Policy, Standards & Procedure Management
• Maintain 30+ TECM/SSSDLC/RFC and 6 INC/AVL/PRB policy, standard, and procedure documents.
• Ensure alignment and traceability across policies, standards, procedures, and associated controls.
• Control Monitoring
• Drive ongoing maturity of TECM/SSSDLC and INC/AVL/PRB Risk & Control Self-Assessments (RCSA)
• Oversee monitoring and governance of 62 SSSDLC and 8 Vulnerability Management controls
• Identify, analyze, and escalate control deviations requiring platform remediation
• Audit Remediation & Control Assurance
• Coordinate remediation across high-priority audit findings impacting software delivery, testing, requirements management, and data governance
• Perform control effectiveness reviews and monthly sampling to validate framework compliance and operational execution.
• Advance automation and AI-enabled capabilities to reduce manual effort and improve scalability
• Strategic Roadmap & Continuous Improvement
• Support development and execution of the TECM/SSSDLC and INC/AVL/PRB strategic roadmap
• Assess current-state frameworks against industry standards, regulatory expectations, and emerging market practices
• Identify opportunities to streamline processes, modernize controls, and leverage automation and AI
• ServiceNow Product & Backlog Governance
• Manage intake, requirement refinement, and prioritization of ServiceNow enhancements supporting Change Management, Permit-to-Operate (PTO), Incident Management, Problem Management, Business Impact Management, Knowledge Management
• Maintain a prioritized backlog aligned to business objectives and delivery capacity
• Ensure user stories, requirements, acceptance criteria, and dependencies are clearly defined before development

• 2-5 years of experience in technology, operations, risk, governance, audit, or control functions within Financial Services
• Strong analytical, problem-solving, and stakeholder management skills
• Ability to drive cross-functional initiatives and deliver results in a fast-paced environment
• Excellent written and verbal communication skills, including executive-level reporting
• Passion for continuous improvement, automation, AI, and process optimization
• Experience working in regulated or complex enterprise environments

Preferred Qualifications

• Experience in technology governance, SSSDLC, change management, production services, technology risk, or controls
• Strong understanding of TECM/SSSDLC, Incident, Problem, and Change Management processes
• Ability to partner across multiple stakeholders to drive governance and strategic outcomes
• Experience supporting audit remediation, regulatory initiatives, control monitoring, and continuous improvement
• Strong analytical, communication, and stakeholder management skills
• Experience leveraging AI, automation, and data-driven insights to modernize governance and risk management

Leadership Scope

• Influence and collaborate across multiple Engineering stakeholder groups
• Drive governance, transformation, and continuous improvement initiatives
• Champion innovation, automation, and operational excellence