girl looking into her desktop
Back to search results

Business Information Security Officer (BISO)

Denver, Colorado;

Job Description:

Bank of America is looking people with a passion for cyber security, are you someone that loves complex problems, someone that can work with technologists and the businesses to enable best of breed technology solutions securely then we want to meet you.

The Information Security Officer will be a member of the Global Information Security (GIS) Business Information Security Officer's (BISO) organization and work closely with Cyber Threat Defense Operations (CTDO) and provides input back to CTDO when required as well as serving as a triage function to consult vertical BISO/regional BISO or SBD change type teams (BISO Operations SDR Permit Team, SDG, Cloud BISO, BISO SLT) .

Scale/Scope
• Serve as the primary contact with CTDO for Integration with BISO/SBD and opining on the applicability of a threat to the bank.
• Partner with relevant GIS teams to provide additional detail on a specific applicability of newly identified threats, as identified by the CTDO.
• Monitors information security trends internal and external to the bank and keeps Line of Business (LOB) leadership informed about information security-related.
• Collaborate and facilitate debate sessions on the applicability of Control strengths or Control weaknesses, specifically the applicability related to any controls gaps or weaknesses that may impact Secure by Design.
• Advises LOB management on risk issues related to information security and recommends actions in support of the bank's wider risk management and compliance programs.
• Leverage risk-based reporting to shape the risk posture and subsequently derive guidance to improve information security adoption across the enterprise.

Risk Management
• Drives GIS/LOB risk deliverables and assists CIO teams in prioritizing cyber security initiatives.
• Collaborates with GIS and LOB risk partners on info security critical priorities.
• Participates in senior LOB specific Risk Management & Business Continuity Routines.
• Identifies and measures GIS controls on most critical business processes or channels.

Required Skills:
• Candidate needs to have a broad technical background and solid understanding of application security (including OWASP), network security, Identity and Access Management, cryptography and cloud security principles.
• Ability to analyze systems, threat model new features, identify security vulnerabilities in implementation, and recommend security controls to ensure technology designs meet organization’s information security policies and standards.
• Experience assessing and managing technology and cyber security risks related to application, network and infrastructure.  
• Significant expertise in Policy development and Policy assessment / Policy adherence protocols.
• Experience in Risk management lifecycle processes, including identification, debating, developing action plans and resolution.
• Experience in risk rating/risk scoring protocols and/or methodologies
• Expertise in developing and deploying Key Risk Indicators
• The successful candidate will be pragmatic, collaborative and have relationship management expertise.
• Passion to learn emerging technology and continue understanding of the info security landscape
• Ability to navigate across organizational or perceived boundaries with incomplete information to achieve successful outcomes
• Internal candidates should have a broader understanding of Bank of America’s change management and issue management processes
 

Highly Desired Skills and Experience
• 5-8 years of experience in technology and 5+ years in information security
• Knowledge and experience of Public Cloud adoption, virtualization and container security principles highly desirable.
• Prior experience in application security, vulnerability testing, system testing, and/or Agile lifecycle management
• Significant experience in cyber security, software, network or infrastructure engineering; including information security assessment methodologies
• Experience navigating the firm’s technology lifecycle management programs (Secure by Design, Permit to Send, Permit to Operate, GCGF etc).
• Experience giving presentations and superb communication skills
• Bachelor's and/or Master’s degree in Computer Science, Information Technology or related field
 

Job Band:

H4

Shift: 

1st shift (United States of America)

Hours Per Week:

40

Weekly Schedule:

Referral Bonus Amount:

0

Job Description:

Bank of America is looking people with a passion for cyber security, are you someone that loves complex problems, someone that can work with technologists and the businesses to enable best of breed technology solutions securely then we want to meet you.

The Information Security Officer will be a member of the Global Information Security (GIS) Business Information Security Officer's (BISO) organization and work closely with Cyber Threat Defense Operations (CTDO) and provides input back to CTDO when required as well as serving as a triage function to consult vertical BISO/regional BISO or SBD change type teams (BISO Operations SDR Permit Team, SDG, Cloud BISO, BISO SLT) .

Scale/Scope
• Serve as the primary contact with CTDO for Integration with BISO/SBD and opining on the applicability of a threat to the bank.
• Partner with relevant GIS teams to provide additional detail on a specific applicability of newly identified threats, as identified by the CTDO.
• Monitors information security trends internal and external to the bank and keeps Line of Business (LOB) leadership informed about information security-related.
• Collaborate and facilitate debate sessions on the applicability of Control strengths or Control weaknesses, specifically the applicability related to any controls gaps or weaknesses that may impact Secure by Design.
• Advises LOB management on risk issues related to information security and recommends actions in support of the bank's wider risk management and compliance programs.
• Leverage risk-based reporting to shape the risk posture and subsequently derive guidance to improve information security adoption across the enterprise.

Risk Management
• Drives GIS/LOB risk deliverables and assists CIO teams in prioritizing cyber security initiatives.
• Collaborates with GIS and LOB risk partners on info security critical priorities.
• Participates in senior LOB specific Risk Management & Business Continuity Routines.
• Identifies and measures GIS controls on most critical business processes or channels.

Required Skills:
• Candidate needs to have a broad technical background and solid understanding of application security (including OWASP), network security, Identity and Access Management, cryptography and cloud security principles.
• Ability to analyze systems, threat model new features, identify security vulnerabilities in implementation, and recommend security controls to ensure technology designs meet organization’s information security policies and standards.
• Experience assessing and managing technology and cyber security risks related to application, network and infrastructure.  
• Significant expertise in Policy development and Policy assessment / Policy adherence protocols.
• Experience in Risk management lifecycle processes, including identification, debating, developing action plans and resolution.
• Experience in risk rating/risk scoring protocols and/or methodologies
• Expertise in developing and deploying Key Risk Indicators
• The successful candidate will be pragmatic, collaborative and have relationship management expertise.
• Passion to learn emerging technology and continue understanding of the info security landscape
• Ability to navigate across organizational or perceived boundaries with incomplete information to achieve successful outcomes
• Internal candidates should have a broader understanding of Bank of America’s change management and issue management processes
 

Highly Desired Skills and Experience
• 5-8 years of experience in technology and 5+ years in information security
• Knowledge and experience of Public Cloud adoption, virtualization and container security principles highly desirable.
• Prior experience in application security, vulnerability testing, system testing, and/or Agile lifecycle management
• Significant experience in cyber security, software, network or infrastructure engineering; including information security assessment methodologies
• Experience navigating the firm’s technology lifecycle management programs (Secure by Design, Permit to Send, Permit to Operate, GCGF etc).
• Experience giving presentations and superb communication skills
• Bachelor's and/or Master’s degree in Computer Science, Information Technology or related field
 

Shift:

1st shift (United States of America)

Hours Per Week: 

40

Learn more about this role

Full time

JR-21061860

Band: H4

Manages People: No

Travel: Yes, 5% of the time

Manager:

Talent Acquisition Contact:

Samuel Ezeilo

Referral Bonus:

0

Colorado job seekers

Colorado pay range:

$146,000 - $212,600 annualized salary, offers to be negotiated based on experience, education and skill set.

Discretionary incentive eligible

This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.