Cybersecurity Regulatory Lead

BBVA is a global company with more than 160 years of history that operates in more than 25 countries where we serve more than 80 million customers. We are more than 121,000 professionals working in multidisciplinary teams with profiles as diverse as financiers, legal experts, data scientists, developers, engineers and designers.

The Cybersecurity Regulatory Engagement Senior Manager is an individual contributor role within the Information Security function for BBVA Corporate & Investment Banking (CIB) USA. The position reports directly to the Head of Information Security for BBVA CIB USA and serves as a key point of coordination for cybersecurity regulatory, audit, and security assurance activities.

This role is responsible for managing and executing cybersecurity regulatory engagements across the U.S. business, including regulatory examinations, supervisory inquiries, remediation activities, regulatory requests, and the implementation of new or evolving regulatory requirements.

The role also coordinates internal audit engagements where Information Security is in scope and leads or supports cybersecurity control assessments, attestations, and evidence-based demonstrations of compliance and control maturity.

The successful candidate will bring strong cybersecurity and regulatory judgment, excellent stakeholder-management skills, and the ability to work independently with senior cybersecurity leadership, engineering and control owners, and risk partners in a highly regulated U.S. financial-services environment.

• →

  Lead and coordinate cybersecurity regulatory engagements for BBVA CIB USA, including examinations, supervisory reviews, regulatory inquiries, and follow-up activities, serving as the primary Information Security coordination point to ensure responses, evidence, and presentations are accurate, complete, and timely.

• →

  Partner across Cybersecurity, Technology, Risk, Compliance, Legal, Internal Audit, and business stakeholders to support regulatory and assurance activities, translating evolving cybersecurity regulatory requirements into actionable expectations for Information Security and control owners.

• →

  Coordinate internal audit engagements involving Information Security, including preparation, evidence collection, walkthroughs, responses, and remediation tracking, while also supporting regulatory attestations, control assessments, and framework maturity reviews to ensure outcomes are evidence-based and validated.

• →

  Maintain oversight of cybersecurity compliance and control maturity across applicable regulations, supervisory expectations, and industry frameworks by performing control mapping and gap assessments across regulatory requirements, internal policies, and security controls, and developing regulatory readiness capabilities such as evidence repositories, control mappings, regulatory inventories, and reusable documentation.

• →

  Own and support the maintenance, periodic review, and enhancement of Information Security policies and procedures for BBVA CIB USA, ensuring alignment with applicable regulatory requirements, audit expectations, and cybersecurity best practices.

• →

  Ensure coordination and adherence with broader BBVA Group Information Security policies and standards, supporting consistent interpretation, implementation, and execution of Group-wide cybersecurity requirements within the U.S. CIB environment.

• →

  Track and manage regulatory and audit findings, management actions, and remediation commitments, ensuring timely and sustainable closure, while partnering with control owners to embed regulatory requirements into effective and sustainable cybersecurity controls.

• →

  Review and challenge the quality and defensibility of regulatory and audit evidence and management responses prior to submission, identify recurring themes across engagements, and recommend improvements to strengthen the cybersecurity control environment.

• →

  Prepare concise management reporting and executive updates on examinations, audit status, control maturity, and remediation progress, and support interactions with regulators, auditors, and independent assessors, including walkthroughs, interviews, and control demonstrations.

• The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information (41 C.F.R. 60-1.35 (c)).

BBVA USA, BBVA Securities Inc., and BBVA S.A. New York Branch invite all interested and qualified applicants to apply for employment opportunities. If you are a U.S.-based job seeker with a disability who is unable to use our online tools to search and apply for jobs, please contact us by emailing: disabilityaccessjobs.us@bbva.com or by calling toll-free (in the U.S.) 1-844-664-9275. Please indicate the specific type of assistance needed*.

*The disability access telephone line and email address are reserved solely for job seekers with disabilities requesting accessibility assistance or an accommodation. Please do not call about the status of your job application if you do not require accessibility assistance or an accommodation. Messages left for other purposes, such as following up on an application or non-disability related or technical issues, will not receive a response.

BBVA USA, BBVA Securities Inc., and BBVA S.A. New York Branch have a firm and unwavering policy to provide equal employment opportunity without regard to age, citizenship, color, disability, ethnic origin, gender, gender identity and expression, marital status, nationality, national origin, race, religion, sexual orientation, genetic predisposition, protected veteran status, or any other status or classification protected by federal, state or local law. This policy includes all job groups, classifications and organizational units. With regard to employment, this policy extends to applicants and covers our recruiting, hiring, promotion, transfer, demotion, discipline, termination, benefits, compensation and training practices as well as social and recreational activities.

View the "EEO is the Law" & "View the EEO is the Law Supplement Poster" poster. BBVA USA, BBVA Securities, Inc., and BBVA NY are equal opportunity and affirmative action employer.