Security Architecture and Application Security Senior Manager
Banco Bilbao Vizcaya Argentaria, S.A.20 hours ago
Base Salary
$185k - $200k/yr
Responsibilities
- Perform security architecture reviews and threat modeling for applications, APIs, cloud services, infrastructure, and third-party solutions.
- Evaluate authentication, authorization, IAM, encryption, secrets and key management, network segmentation, data protection, cloud security, and secure integration patterns.
- Own security workstreams for multiple concurrent technology initiatives, including deliverables, dependencies, priorities, and milestones.
- Manage security engagements according to business criticality, architecture complexity, security risk, and delivery timelines.
- Identify and escalate security risks, blockers, gaps, and dependencies, and recommend compensating controls where appropriate.
- Validate that approved security controls are implemented as designed before production deployment.
- Participate in project governance meetings and provide security guidance to project teams.
- Assess proposed architectures against BBVA security standards and U.S. regulatory requirements.
- Provide delegated Security Architecture and Application Security support for local initiatives and nonstandard lifecycle engagements.
- Collaborate with Corporate Security Architecture, Enterprise Architecture, Technology Engineering, Application Development, Infrastructure, Risk, Compliance, and business stakeholders.
Requirements
- Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or a related field, or equivalent experience.
- 10+ years of experience in Information Security, Security Architecture, Application Security, Infrastructure Security, or Cybersecurity Engineering.
- Experience participating in technology projects and implementing security controls.
- Strong understanding of network security, cloud security, identity and access management, application security, and infrastructure security.
- Experience performing security risk assessments and architecture reviews.
- Familiarity with financial services security requirements and regulatory expectations, preferably with banking or financial services experience.
- Knowledge of NIST CSF, NIST 800-53, ISO 27001, CIS Controls, New York DFS Cybersecurity Regulation, SEC cybersecurity requirements, NFA cybersecurity requirements, FFIEC Guidelines, EU DORA, SWIFT CSCF, FedLine security requirements, CHIPS-related security requirements, CRI Profile, or similar frameworks.
- Experience reviewing Azure, AWS, or GCP cloud architectures.
- Knowledge of AI security, third-party risk, and secure software development practices.
- Professional certifications such as CISSP, CCSP, GCSA, CCSK, CSSLP, or SANS GWEB certifications are valued.
- Strong communication, stakeholder management, analytical thinking, problem-solving, security governance, risk assessment, and control validation skills.
- Spanish proficiency is a plus.
Benefits
- Generous employee benefits package.
- Eligible for a discretionary bonus.
- New York office position with U.S. employment eligibility required.
Tech Stack
Categories
About Banco Bilbao Vizcaya Argentaria, S.A.
Banco Bilbao Vizcaya Argentaria, S.A. (BBVA) is a Spanish multinational bank providing retail, corporate and investment banking, digital payments, lending, and wealth services for consumers and businesses. It operates in 25+ countries and serves over 80 million customers, with major franchises in Spain and Mexico and a strong emphasis on data-driven digital banking. Founded in 1857, BBVA is headquartered in Bilbao, Spain.