We're seeking a future team member for the role of Senior Associate, Infrastructure Services to join our Production Services Governance team. This role is located in NY/PGH/Lake Mary. In this role, you'll make an impact in the following ways: Responsible for supporting the governance, oversight, and continuous improvement of BNY's Technology Enterprise Change Management (TECM) Framework /Secure Systems & Software Development Lifecycle (SSSDLC), Request for Change (RFC), Incident (INC), Availability (AVL), and Problem Management (PRB) processes Partner across Engineering, Production Services, Risk, and Audit teams to strengthen control effectiveness, drive audit readiness, ensure regulatory sustainability, and advance strategic modernization initiatives through automation and AI-enabled capabilities AI, Automation & Governance Modernization Champion the adoption of BNY's AI capabilities - including Digital Engineer, Windsurf, Eliza, and Microsoft Copilot - to transform day-to-day governance, risk management, policy oversight, and control BAU Identify opportunities to embed AI throughout the Secure System & Software Development Lifecycle (SSSDLC), enabling teams to improve requirements quality, development efficiency, testing effectiveness, control compliance, and production resiliency Drive the use of AI for governance activities including policy analysis, control monitoring, audit evidence collection, risk assessments, issue management, reporting, and regulatory preparedness Leverage AI-assisted insights to proactively identify control gaps, emerging risks, recurring issues, and opportunities for process simplification and automation Governance Forums & Executive Reporting Partner with Engineering and senior technology leaders to drive strategic governance forums that support enterprise decision-making and oversight Support governance for the Technology & Cyber Resiliency Council, Technology & Cyber Resiliency Forum, Production Services Governance Forum, and Enterprise Software Delivery Council (ESDC) Lead the development of the monthly Technology & Cyber Resiliency Newsletter Policy, Standards & Procedure Management Maintain 30+ TECM/SSSDLC/RFC and 6 INC/AVL/PRB policy, standard, and procedure documents. Ensure alignment and traceability across policies, standards, procedures, and associated controls. Control Monitoring Drive ongoing maturity of TECM/SSSDLC and

INC/AVL/PRB

Risk & Control Self-Assessments (RCSA) Oversee monitoring and governance of 62 SSSDLC and 8 Vulnerability Management controls Identify, analyze, and escalate control deviations requiring platform remediation Audit Remediation & Control Assurance Coordinate remediation across high-priority audit findings impacting software delivery, testing, requirements management, and data governance Perform control effectiveness reviews and monthly sampling to validate framework compliance and operational execution. Advance automation and AI-enabled capabilities to reduce manual effort and improve scalability Strategic Roadmap & Continuous Improvement Support development and execution of the TECM/SSSDLC and

INC/AVL/PRB

strategic roadmap Assess current-state frameworks against industry standards, regulatory expectations, and emerging market practices Identify opportunities to streamline processes, modernize controls, and leverage automation and AI ServiceNow Product & Backlog Governance Manage intake, requirement refinement, and prioritization of ServiceNow enhancements supporting Change Management, Permit-to-Operate (PTO), Incident Management, Problem Management, Business Impact Management, Knowledge Management Maintain a prioritized backlog aligned to business objectives and delivery capacity Ensure user stories, requirements, acceptance criteria, and dependencies are clearly defined before development To be successful in this role, we're seeking the following: 2-5 years of experience in technology, operations, risk, governance, audit, or control functions within Financial Services Strong analytical, problem-solving, and stakeholder management skills Ability to drive cross-functional initiatives and deliver results in a fast-paced environment Excellent written and verbal communication skills, including executive-level reporting Passion for continuous improvement, automation, AI, and process optimization Experience working in regulated or complex enterprise environments Preferred Qualifications Experience in technology governance, SSSDLC, change management, production services, technology risk, or controls Strong understanding of TECM/SSSDLC, Incident, Problem, and Change Management processes Ability to partner across multiple stakeholders to drive governance and strategic outcomes Experience supporting audit remediation, regulatory initiatives, control monitoring, and continuous improvement Strong analytical, communication, and stakeholder management skills Experience leveraging AI, automation, and data-driven insights to modernize governance and risk management Leadership Scope Influence and collaborate across multiple Engineering stakeholder groups Drive governance, transformation, and continuous improvement initiatives Champion innovation, automation, and operational excellence