Information Security Threat Management Specialist

at  Bank of America

JOB DESCRIPTION:

Job Title: Information Security Threat Management Specialist
Corporate Title: Vice President
Location: Dublin
Company Overview:
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.
One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.
Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.
Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!
Location Overview:
Our Central Park office in Leopardstown, boasts modern facilities based in Dublin’s premium business park. With an onsite gym and staff restaurant, all your daily needs are conveniently catered for. Travel options include the LUAS network and the Central Park shuttle service between Dublin City Centre and Central Park. We also provide tax saver tickets as part of our award-winning benefits package, which means getting to work has never been so easy.
Role Description:
The Identity Defense organization aims to protect digital identities which allow access to the Bank’s internal network, resources and applications. You would be accountable for researching, designing, engineering, implementing, and supporting solutions to prevent and detect anomalous use of accounts.
You will be supporting design efforts to build out new processes and supporting governance related to implementation of human and non-human account monitoring to protect the Bank. You will utilize in-depth technical knowledge and business requirements to help implement scalable solutions, inclusive of monitoring, alerting, and escalation frameworks focused on core account protections. Leveraging your knowledge of both common and emerging threats related to account take-over, you will have an opportunity to proactively develop, implement, and influence controls and policy within the digital identity domain. You will partner with leaders from line of business organizations to triage security events and report on impacting security incidents.
The Specialist will regularly collaborate with experts in and out of our team, both in country and in other regions, so excellent communication skills are very important. The role will also involve discussion with employees as part of alert analysis and disposition. If you are seeking a demanding role within Global Information Security (GIS) and have the required skills, this will be a great opportunity for you.

Responsibilities:

• You will be investigating alerts related to potentially anomalous behaviour/activity.
• Confidently and professionally interview/question users to establish or confirm root cause.
• Communicate effectively with response and business partners.
• Build and monitor Splunk alerting and dashboards.
• Identify areas for further process automation, simplification, and improvement.
• Provide status updates for executives and stakeholders in non-technical terms encompassing risk, impact, containment, remediation.
• Risk management.
• Comprehensively document analysis, investigative activities, actions.
• Ability to work non-standard hours, to include occasional on-call time during nights, weekends, and holidays.

What we are looking for:

• Extensive experience with Information Security related activities.
• Extensive experience in an operations focused information security role.
• Experience conducting analysis/investigation and containment of potential data breaches or cyber security incidents.
• Ability to analyse data and evaluate relevance to a specific incident under investigation.
• Ability to handle multiple competing priorities in a fast-paced environment; ability to be decisive and act without causing an undue delay.
• Familiarity with security vulnerabilities exploits and hacker techniques.
• Familiarity with identity management standards, social engineering TTPs, and the incident response lifecycle
• Familiarity with Splunk, with the ability to build queries, alerts, dashboards, etc.
• Knowledgeable of current authentication-based exploits in traditional and cloud environments, for both human and non-human accounts.
• Proven experience presenting findings via written reports and orally to key stakeholders in clear and concise language.
• Networking and/or Security Experience.
• Experience detecting Insider Threats and placing controls within an organization to protect against digital identity threats.

Skills that will help:

• An extensive working knowledge of security threat vectors, networking, network security and application security.
• Advanced problem-solving skills.
• Able to adapt communication style to the audience.
• Demonstrates the capability of working in a team environment and collaborating with overseas partners.
• Ability to work independently.
• Certifications such as CISSP, CompTIA Security+, CySA+, CCNA, CEH, GCIH, are desired, but not required.

Benefits of working at Bank of America:
Ireland

Private healthcare for you and your family plus an annual health screen to help you manage your physical wellness with the option to purchase a screen for your partner

• Competitive pension plan, life assurance and group income protection cover if you become unable to work as a result of a disability or health reasons
• 20 days of back-up childcare and 20 days of back-up adult care per annum
• The ability to change your core benefits as well as the option of selecting a variety of flexible benefits to suit your personal circumstances including access to a wellbeing account, travel insurance, critical illness etc.
• Access to an Employee Assistance Program for confidential support and help for everyday matters
• Access to free counselling through the Employee Assistance Program and virtual GP services through our private health care plan
• Ability to donate to charities of your choice and the bank will match your contribution
• Opportunity to access our Arts & Culture corporate membership program and receive discounted entry to some of Ireland’s most iconic cultural institutions and exhibitions.
• Opportunity to give back to your community, develop new skills and work with new groups of people by volunteering in your local community.

Bank of America:
Good conduct and sound judgment is crucial to our long term success. It’s important that all employees in the organisation understand the expected standards of conduct and how we manage conduct risk. Individual accountability and an ownership mind-set are the cornerstones of our Code of Conduct and are at the heart of managing risk well.
We are an equal opportunities employer and ensure that no applicant is subject to less favourable treatment on the grounds of gender, gender identity or gender reassignment, marital or civil partner status, race, religion or belief, colour, nationality, ethnic or national origins, membership of the Traveller community, age, sexual orientation, pregnancy or maternity, civil status, socio-economic background, family status or physical or mental disability. The Bank selects candidates for interview based on their skills, qualifications and experience.
We strive to ensure that our recruitment processes are accessible for all candidates and encourage any candidates to tell us about any adjustment requirements.

• You will be investigating alerts related to potentially anomalous behaviour/activity.
• Confidently and professionally interview/question users to establish or confirm root cause.
• Communicate effectively with response and business partners.
• Build and monitor Splunk alerting and dashboards.
• Identify areas for further process automation, simplification, and improvement.
• Provide status updates for executives and stakeholders in non-technical terms encompassing risk, impact, containment, remediation.
• Risk management.
• Comprehensively document analysis, investigative activities, actions.
• Ability to work non-standard hours, to include occasional on-call time during nights, weekends, and holidays