Senior Specialist, Mainframe Vulnerability Management

Overview

Bring your ideas. Make history.
BNY Mellon offers an exciting array of future-forward careers at the intersection of business, finance, and technology. We are one of the world's top asset management and banking firms that manages trillions of dollars in assets, custody and/or administration. Known as the "bank of banks" - 97% of the world's top banks work with us as we lead and serve our customers into the new era of digital.

With over 238 years of rich history and industry firsts, BNY Mellon has been built upon our proven ability to evolve, lead, and drive new ideas at every turn. Today, we're approximately 50,000 employees across 35 countries with a culture that empowers you to grow, take risks, experiment and be yourself. This is what #LifeAtBNYMellon is all about.

We're seeking a future team member in the role of Senior Specialist - Mainframe Vulnerability Management, to join our Information Security team. This role is located in "Major Cities" and/or remote position for the ideal candidate.

In this role, you'll make an impact in the following ways:

The Senior Specialist, Information Security Vulnerability Management, provides day to day execution of the Vulnerability & Control Management Mainframe program, including detailed analysis of various data points on multiple mainframe complexes identifying and addressing vulnerabilities from various scan sources. The Senior Specialist will provide expert guidance concerning mainframe security modelling, track projects and remediation in various supporting platforms such as SharePoint, JIRA, and Confluence. The Senior Specialist must have good knowledge of all three mainframe security systems, RACF, Top Secret, and ACF2 and should be able to use security tools such as zSecure, CARLa, IBM Utilities, DFSORT, SyncSort, TSO/ISPF, VSAM Files, and other Mainframe tools/utilities. The Senior Specialist should also have a good understanding of Universal Access and Privilege Access and the understand the difference between each one and its intended usage.

To be successful in this role, we're seeking the following:

• Understand group structures in RACF, Top Secret, and UID string setup in ACF2 which gives access to Mainframe resources.
• Review mainframe security reports for any possible policy violations.
• Utilize DFSORT/ICETOOL programs, generate reports/files on various RACF Vulnerabilities.
• Execute mainframe vulnerability scans utilizing zSecure and other security tools.
• Review and report on Universal Access, revoked users, Super UNIX User authority, and CICS/IMS/DB2 Access violation reports.
• Use SPLUNK data to support mainframe vulnerability findings.
• Assist the Privileged Access Management Project coordinator with any Mainframe security questions or issues and certifications.
• Nice to have an understanding of Qualys and how it supports Mainframe vulnerability priorities and remediation reporting.

At BNY Mellon, our inclusive culture speaks for itself. Here's a few of our awards:

• Fortune World's Most Admired Companies & Top 20 for Diversity and Inclusion
• Bloomberg's Gender Equality Index (GEI)
• Best Places to Work for Disability Inclusion , Disability: IN - 100% score
• 100 Best Workplaces for Innovators, Fast Company
• Human Rights Campaign Foundation, 100% score Corporate Equality Index
• CDP's Climate Change 'A List'

Our Benefits:

BNY Mellon offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life's journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves that can support you and your family through moments that matter.

BNY Mellon is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.

Employer Description:

For over 230 years, the people of BNY Mellon have been at the forefront of finance, expanding the financial markets while supporting investors throughout the investment lifecycle. BNY Mellon can act as a single point of contact for clients looking to create, trade, hold, manage, service, distribute or restructure investments and safeguards nearly one-fifth of the world's financial assets. BNY Mellon remains one of the safest, most trusted and admired companies. Every day our employees make their mark by helping clients better manage and service their financial assets around the world. Whether providing financial services for institutions, corporations or individual investors, clients count on the people of BNY Mellon across time zones and in 35 countries and more than 100 markets. It's the collective ambition, innovative thinking and exceptionally focused client service paired with a commitment to doing what is right that continues to set us apart. Make your mark: bnymellon.com/careers.

EEO Statement:

BNY Mellon is an Equal Employment Opportunity/Affirmative Action Employer. Minorities/Females/Individuals With Disabilities/Protected Veterans. Our ambition is to build the best global team - one that is representative and inclusive of the diverse talent, clients and communities we work with and serve - and to empower our team to do their best work. We support wellbeing and a balanced life, and offer a range of family-friendly, inclusive employment policies and employee forums.