BBVA
Security Architecture and Application Security Senior Manager
$185K–$200K
New York · Hybrid · Manager · Full-time · Posted Sep 30, 2026
- Experience
- 10+ years; no alternative stated.
- Education
- Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or related field (or equivalent experience).
- Visa sponsorship
- Employment eligibility to work with BBVA in the U.S. is required; the company will not pursue visa sponsorship for these positions.
About the job
Leads security architecture and application security across complex technology initiatives, guiding projects from design through production and validating security controls.
What you'll do
- Review architectures and threat-model applications, APIs, cloud services, infrastructure, and third-party solutions; identify risks and recommend controls.
- Own security workstreams for concurrent initiatives, prioritizing deliverables and driving security activities through completion.
- Advise project teams and validate that approved security controls are implemented before production deployment.
What they ask for
- Bachelor's degree in a related field or equivalent experience.
- 10+ years of experience in Information Security, Security Architecture, Application Security, Infrastructure Security, or Cybersecurity Engineering.
- Experience participating in technology projects, implementing security controls, conducting security risk assessments, and reviewing architectures.
- Strong understanding of network, cloud, identity and access management, application, and infrastructure security.
Nice to have
- Experience in banking or financial services; familiarity with financial-services security requirements and regulatory expectations.
- Spanish proficiency; relevant professional certifications; knowledge of AI security, third-party risk, and secure software development practices.
Pay
$185,000 to $200,000 USD base salary
Tools
Azure, AWS, GCP, NIST Cybersecurity Framework (NIST CSF), NIST 800-53, ISO 27001, CIS Controls, SWIFT Customer Security Controls Framework (CSCF)
AI focus
Knowledge of AI security is preferred; no specific AI development duties are stated.
Model-written summary · the original posting is authoritative