Director, Governance & Frameworks Group Lead

At BNY, our culture allows us to run our company better and enables employees’ growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world’s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

We’re seeking a future team member for the role of Director, Governance Framework to join the Controls Hub. This role is located in New York

Role summary

• Lead the enterprise Governance & Frameworks function responsible for designing, maintaining, and embedding the organization’s risk and control frameworks, policies, standards, and taxonomies. Drive consistency and quality across the first line and second line through clear methodologies, minimum control requirements, and effective governance. Partner with senior leaders to align frameworks with regulatory expectations and business strategy, enable adoption through tooling and training, and provide transparent reporting to governance forums.

Key responsibilities

• Own the enterprise risk and control framework and associated policies, standards, procedures, and minimum control requirements; ensure alignment to regulatory and industry expectations.
• Define and maintain governance structures (charters, committees, roles and responsibilities, decision rights) and the risk management operating model (3LoD clarity).
• Establish and harmonize taxonomies (risk types, control themes, issues, root causes) to support consistent RCSA, issues, and controls management across business units.
• Set methodologies for key programs: RCSA, control testing and QA, issue management, risk appetite and limits, and key risk indicators; drive cross-line-of-business consistency.
• Lead the policy lifecycle: drafting, review, approval, publication, exceptions/dispensations, attestation, and periodic refresh; manage policy inventory and controls mapping.
• Maintain a comprehensive controls library with clear design expectations, testing procedures, and evidence standards; enable sustainability and audit-ready documentation.
• Sponsor and guide GRC tooling strategy and workflows (e.g., policy management, RCSA, issues, control testing); partner with Technology to improve data quality and user experience.
• Provide credible challenge and oversight of framework adoption and adherence; run thematic reviews and quality assurance; escalate material gaps to senior governance forums.
• Coordinate with 2LoD and Internal Audit on expectations, exam readiness, and validation criteria; ensure frameworks meet supervisory guidance and reduce repeat findings.
• Lead enterprise training and communications on governance, policies, methodologies, and roles; build competency and accountability across 1LoD and 2LoD teams.
• Prepare and deliver executive reporting and dashboards on framework adherence, maturity, key metrics, emerging risks, and remediation themes; inform risk appetite and investment.
• Manage a high-performing team; set objectives, coach talent, and foster a culture of clarity, discipline, and continuous improvement.

Qualifications

• 10–12+ years in risk management, operational risk, internal audit, compliance, or enterprise controls within financial services or similarly regulated industries.
• Deep expertise building and maintaining governance frameworks, policies, standards, taxonomies, and GRC-enabled methodologies (RCSA, controls, issues, testing).
• Strong knowledge of regulatory and industry frameworks (e.g., OCC/FRB/FDIC expectations, COSO, ISO 27001/31000, NIST, Basel governance/risk practices).
• Proven ability to design usable methodologies and drive adoption at scale; track record of measurable improvements in adherence and control effectiveness.
• Exceptional stakeholder management; able to provide credible challenge and influence senior leaders and cross-functional teams.
• Data-driven mindset with experience defining KRIs/KPIs, dashboards, and reporting to monitor framework maturity and adherence.
• Advanced program management skills; adept at governance oper