Business Information Security Officer (BISO) Engagement Senior Lead

Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.The BISO Engagement Senior Lead role supports a specific vertical Business Information Security Office and is responsible for the management and oversight for a variety of BISO-CIO governance activities. This role is responsible for partnering with the BISO Executive to balance the needs of the business while ensuring information security risk is appropriately identified and managed to mitigate risk to the organization and drive uncompromising cyber security protection.Specifically, this role is to provide and implement horizontal consistency across a variety of BISO processes and activities. The role is to serve as the main point of contact for each BISO vertical Executive, acting as an integrated business partner with cross-functional senior leaders to provide blended security and business expertise to ensure appropriate management of information security risks. This role will be responsible for overseeing and contributing to all BISO related materials that go to the Global Tech Risk Committee, CIO Key Risk Routines, and FLU Risk Committees. Additionally, this role will identify and drive implementation of opportunities for efficiencies across BISO teams including developing best practices within the vertical BISO team across various processes and procedures, including, but not limited to, ERP Exceptions, Third Party Non-Adherence Oversight, Consequence Model, Operating procedures, Key Risk Routines, FLU Risk Committee, etc.Required Skills:5+ years as an Information Security / Technology professional within a highly-regulated industry5+ years of risk identification experienceStrong sense of ownership and accountabilityExceptional executive presence and experience discussing complex issues with technical and non-technical leadersExceptional Written Presentation Skills and experienceAbility to adjust and react with optimism and professionalism - solution orientedAttention to detailAble to work in a fast-paced, multi-priority environmentStrategic thinking – high-potential ideation beyond what has succeeded in the pastLeverages established laws, rules, regulations, and policy to rationalize decisions – comfortable providing feedback to internal policy owners when askedProficiency with Jira Service Manager, Application HQ, enterprise tollgate tools (ex. CECE, GCGF Intake, PTS/R), and various GIS reporting tools (ex. Tableau, Continuous Monitoring, RSAM, Trident)Influencer – energized by sharing fresh methodology, and leading others to adoption of improvementsCritical thinking – one of the first who grasps new concepts, understands the connections between BISO portfolio of work and that of other teams, and sees potential pitfallsDesired Skills:Bachelors and/or Master’s degree in Computer Science, Information Technology or related fieldThird Party experience within a highly regulated industryCISSP, CISM, or PCI Professional certificationsThis job is responsible for partnering with leaders to balance the needs of the business while ensuring information security and organizational risks are appropriately identified and managed to drive uncompromising cyber security protection. Key responsibilities include leading in-depth information security risk-based discussions and acting as an integrated business partner with cross-functional leaders to provide blended security and business expertise to ensure appropriate management of information security risks.Shift:

1st shift (United States of America)Hours Per Week:

40Pay Transparency details:Pay range: $141,700.00 - $206,100.00 annualized salary, offers to be determined based on experience, education and skill set. This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company. This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.

#J-18808-Ljbffr