Hybrid Senior Business Information Security Officer

at Bank of America

• Job title: Senior Business Information Security Officer
• Job type: Full Time
• Experience level: Senior
• Salary: $141,700 - $206,900 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Cassandra, Cloud, Cyber Security, Hadoop, NoSQL, SQL
• Location requirements: Hybrid, Denver, United States

About the role

• Information Security Officer managing information security initiatives at Bank of America. Collaborating with business units to mitigate risks and drive security strategy.

Responsibilities

• Contribute to the ongoing information security initiatives and improvements development, implementation and maintenance of information security for FLU/Ops
• Serves as an Information Security subject matter expert and participates in the development, implementation and maintenance of information security for FLU/Ops
• Aligned to Fraud Authentication, Financial Center, and Automated Teller Machines channel segments to drive a security strategy and to ensure appropriate security by design requirements execution
• Provides guidance and advocacy regarding the prioritization of investments that impact information security
• Advises management on risk issues related to information security and recommends actions in support of the bank's wider risk management and compliance programs
• Monitors information security trends internal and external to the bank and keeps leadership informed
• Manages quality control and reporting
• Ensures compliance with policies and laws

Requirements

• Information Security & Technology professional with 10+ years’ experience
• 7+ years of risk management experience with proven ability to effectively apply risk principles to challenging business situations
• Subject matter expertise in application security, vulnerability testing and development of risk appetite
• Experience evaluating cyber security controls and providing guidance for platform or distributed computing platforms (Cloud, PaaS)
• Experience evaluating third party information security control and providing guidance to reduce risk on identify observations
• Experience with information security for No SQL, Big Data, and unstructured data stores (Cassandra, Hadoop, and /or Teradata)
• Knowledge in Windows, Midrange and Mainframe Platforms with emphasis on security application security controls
• Exceptional executive presentation and communication skills
• Excellent influencing and problem resolution skills
• Advises LOB management on risk issues related to information security and recommends actions in support of the bank's wider risk management and compliance programs
• Ability to be comfortable delivering messages across a wide spectrum of individuals having varying degrees of technical understanding
• Strong leadership skills and qualities which enable you to work with peers and various levels of management

Benefits

• Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors
• Industry-leading benefits
• Access to paid time off
• Resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve