Director, Cyber Strategy & Architecture

At Valley Bank, we believe in people's growth potential. We invest in it. We protect it. We focus it. For nearly 100 years, we've been the Bank that clients from every industry turn to for our expertise, strategies, and advice--building the kind of trust that can fuel every goal. We are the leading relationship bank built for growth--with over $60 billion in assets, 3,800 experts, and more than 200 consumer branches and commercial banking offices in communities across the US.

At Valley, we're all driven by an ambition that goes deeper than just having a job. That's why when you work for us, we make it our goal to help you focus on what drives you--working to turn your passions and strengths into assets you can use to propel your ambitions and build the professional legacy you want. Because when we say we're a relationship bank built for growth, that's not just reserved for our clients--that includes all our associates as well.

The Director, Cyber Strategy & Architecture, is responsible for providing enterprise-wide cyber security architecture leadership and serving as the Bank's authoritative technical subject matter expert across multiple cyber domains. This role combines deep technical expertise in enterprise, application, and network security architecture with the strategic insight and experience required to shape long-term cyber direction and enable secure business innovation.

The position is accountable for bridging current-state cyber capabilities with future-state needs by identifying emerging risks, defining acceptable risk levels for new technologies, guiding executive decision-making, and supporting a sustainable cyber operating model.

,

Responsibilities Include But Are Not Limited To

• Set and evolve the Bank's enterprise cyber security vision, strategy, and architecture roadmap, providing enduring direction across applications, infrastructure, cloud, network, and data domains.
• Serve as a trusted strategic advisor to executive leadership and the Board, translating complex cyber risk into clear business, regulatory, and risk based decisions.
• Establish enterprise security architecture standards, principles, and reference designs, enabling secure integration, data exchange, and scalable reuse across initiatives and partners.
• Act as the authority on emerging technology and cyber risk, defining acceptable risk thresholds, guiding innovation and POCs, and conducting architectural reviews for new products, platforms, and integrations.
• Provide senior leadership during cyber incidents and technology crises, serving as an escalation point while shaping resilient, sustainable operating models.
• Represent the Bank as a cyber thought leader, engaging fintechs, startups, and partners, participating in industry forums, and mentoring senior technical talent to strengthen long term capability.

,

Required Skills

• Expert knowledge in defining security architecture requirements, threat modeling and risk management.
• Expert knowledge of enterprise, application, and network security architecture mechanisms, components and integration with technology components and operations.
• Strong knowledge of application security, web and application design, databases, operating systems, hypervisors, IP networks, microservices, container technology, system integration technologies and securing cloud-based applications.
• Expert knowledge of cloud computing technologies including Microsoft Azure and Amazon AWS.
• AI/LLM threat modeling (prompt injection, data poisoning, model theft).
• Securing ML pipelines (training → inference → deployment).
• Understanding OWASP Top 10 for LLMs.
• Adversarial ML risks (evasion, poisoning, model inversion) wrap up.
• Strong understanding of banking regulations and third-party risk.
• Excellent verbal and written communication skills.
• Strong interpersonal skills to facilitate building positive working relationships at all levels within the bank.
• Ability to define long-term cyber strategy, influence executive decision-making, and communicate complex technical issues clearly.
• Ability to handle multiple priorities simultaneously.
• Ability to delegate assignments and deal with "crisis-type" situations.

Required Experience

• Bachelor's degree in Cybersecurity, Computer Science or related field and a minimum of 10 years' Information Technology and Information Security experience.

Preferred Experience

• Master's Degree in Cybersecurity, Computer Science, or a related field.
• CISSP, CISM, GSEC, CRISC, or other relevant professional certifications.