JOB DESCRIPTION:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.
Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.
Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

JOB DESCRIPTION:

The Global Information Security - Cyber Defense team is looking for more than a check-box-filler. We want a data protection powerhouse. You’ll be on the front lines, diving deep into endpoint events, spotting threats before they strike and helping shape the policies that protect our global operations. Your work will directly safeguard our people, clients, and our reputation. If you’re the type who spots a pattern before anyone else, thrives on collaboration across continents, and treats every alert as a puzzle worth solving, you might just be our next team member.
Candidate must be willing to enroll in Associate Investment Monitoring due to the nature of the role and access.

What You’ll Do

• Analyze and Respond: Complete daily, continuous analysis of Endpoint Data Loss Prevent events (and others) with accurate results within the defined business SLA.
• Team Up for Impact: Collaborate with cyber security teams to drive both immediate and long-term global information security goals.
• Quality First: Participate in and contribute to the peer review process to maintain consistently high QA results.
• Close the Gaps: Identify and escalate potential policy gaps and enhancements to adapt to evolving risk landscapes.
• Share & Learn: Engage actively in team discussions and knowledge sharing to elevate group expertise.
• See the Bigger Picture: Use event metrics, escalation data, and trend analysis to proactively recommend, design, and implement improvements that reduce risk.

Why You’ll Love Working Here

• Global Impact: Your work will protect systems and data across multiple countries and industries.
• Collaborative Culture: Work alongside smart, driven peers who genuinely value teamwork.
• Hook Interest: Work within a technically complex, fast changing, and dynamic environment.
• Room to Grow: Opportunities to deepen expertise and influence global policies on a team that actively supports advancement.
• Flexibility: Hybrid friendly with opportunities for global collaboration.

Required Qualifications

• Experience: 3+ years of experience in information security or a related technology field.
• Breadth of Knowledge: Strong understanding of different security domains and industry leading DLP technologies.
• Threat Savvy: Experience spotting threats, vulnerabilities, and exploitation methods.
• Tech Literacy: Solid grasp of networking, system security, vulnerabilities, exploits, and common attack vectors.
• Problem-Solving Mindset: Intellectual curiosity, critical thinking, and a drive for proactive solutions.
• Communication Skills: Strong written and verbal skills; able to present technical topics to audiences of all levels.
• Self-Starter Energy: Comfortable navigating a geographically diverse, complex global corporation while collaborating effectively.

Desired Qualifications

• Certifications –Security+, Network+, CEH, CISSP, CySA+, CISA, CCNA, CCNP
• Familiarity with McAfee ePolicy Orchestrator (ePO) – Incident Manager
• Familiarity with Confluence / SharePoint
• Experience with Splunk
• Familiarity with JIRA
• Cloud security understanding with knowledge of CASB and DRM solutions

SKILLS:

• Cyber Security
• Data Privacy and Protection
• Problem Solving
• Process Management
• Threat Analysis
• Business Acumen
• Data and Trend Analysis
• Interpret Relevant Laws, Rules, and Regulations
• Risk Analytics
• Stakeholder Management
• Access and Identity Management
• Data Governance
• Encryption
• Information Systems Management
• Technology System Assessment
  This job will be open and accepting applications for a minimum of seven days from the date it was posted.

• Analyze and Respond: Complete daily, continuous analysis of Endpoint Data Loss Prevent events (and others) with accurate results within the defined business SLA.
• Team Up for Impact: Collaborate with cyber security teams to drive both immediate and long-term global information security goals.
• Quality First: Participate in and contribute to the peer review process to maintain consistently high QA results.
• Close the Gaps: Identify and escalate potential policy gaps and enhancements to adapt to evolving risk landscapes.
• Share & Learn: Engage actively in team discussions and knowledge sharing to elevate group expertise.
• See the Bigger Picture: Use event metrics, escalation data, and trend analysis to proactively recommend, design, and implement improvements that reduce risk