Info Security Consultant

at  Bank of America

SKILLS THAT WILL HELP:

• Experience within a technology and financial organization at a mid-level to senior level with good knowledge of Application Security controls and risks.
• Understanding of the concepts of vulnerability management and associated monitoring solutions and practices
• Experience of formal security risk assessment methodologies
• In depth technical level of understanding of Technology Infrastructure operations, showing a strong understanding of relevant subject matters
• Previous experience working within a financial institution

ROLE DESCRIPTION:

The Information Security Officer will be a functional member of the Business Information Security Officer’s organization and work closely with the Global Banking and Markets Chief Information Officers Chief Technology Officers teams to develop a good understanding of the business in order to have specialized information security risk-based discussions.
This relationship will ensure a focus on the right risk priorities. The Information Security Officer will also act as the day-to-day point of contact providing guidance on information security topics, policies. Ultimately, the Information Security Officer will become a trusted advisor to our stakeholders.

RESPONSIBILITIES:

• Provide advisory and oversight for changes within Global Banking and Markets environment where related to security leveraging the regional information security consultants and global operational response teams as needed
• Work in collaboration with the Risk teams supporting them in their activities and helping them continue to develop processes and solutions
• Work with the global BISO organization to ensure that Global information security requirements and initiatives are communicated, discussed and tracked in an effective, consistent and timely way
• Establish and maintain a network of stakeholders and partners
• Conduct routine liaison and coordination across the risk partners and technology groups to remediate GIS issues showing red or amber on the vulnerability remediation dashboard
• Coordinate and drive remediation of ad hoc GIS issues and assist partners to reach a resolution in line with GIS baselines and standards