Info Security Consultant II B

Bank of America; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Bank of America in India is seeking a QA-focused information security professional to review Permit to Operate and Permit to Send cases, conduct GIS assessments, and ensure Secure-by-Design practices across applications. The role emphasizes vulnerability assessment, application architecture, and networking within a global security program.

Ideal candidates have 6–9 years of experience, a BE/BTech or ME/MTech/MCA degree, and security certifications (ISO 27001/ CISSP/CISA).

Qualifications

• Bachelor-level engineering or related master's degree.
• Certifications such as ISO 27001/42001/CISSP/CISA are desirable.
• 6–9 years of experience in information security or QA for security domains.
• Experience with Secure-by-Design (SbD) methodology.
• Strong stakeholder management skills and cross-team collaboration.
• Knowledge of Cloud/AI security considerations is a plus.

Responsibilities

• Advises on moderately complex security issues to client management.
• Identifies and escalates changes affecting information security policies and standards.
• Works on complex problems requiring in-depth evaluation of factors.
• Exhibits judgment in selecting methods and criteria to obtain results.
• Proactively solves problems within a cohesive team environment.
• Builds a strong techno-functional security team.
• Works in a fast-paced environment and collaborates effectively with others.

Skills

Vulnerability

InfoSec Governance

QA Process

SbD

Stakeholder Mgmt

Cloud/AI

Education

B.E./B.Tech / M.E./M.Tech / MCA

Job description

Job Description:

About Us

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.
Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates' physical, emotional, and financial wellness through affordable, competitive and flexible benefits.
We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.
Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Global Business Services

Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations.

Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence and innovation.

In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services.

Process Overview

The BISO is responsible for protecting Bank information systems, confidential and proprietary data, and customer information. The team develops the Bank's Information Security strategy and policy, manages the Information Security program.

Job Description

The QA team will be performing a review on Permit to Operate (PTO) and Permit to Send (PTS) cases, GATR (GIS Assessment for Technical Review), SDR (secure design review) for all applications, the quality review will ensure as to whether GIS assessors obtained adequate responses to each tollgate. The evaluation will be focused on InfoSec domains for Vulnerability Assessment, Application Architecture, Networking, Systems Admin, Cryptography and Access. The scope of the review encompasses 9 different tollgates covering the above domains within SbD (Secure-by-Design) process. Cross-team collaboration falls within the remit of this role.

Responsibilities

• Provides advice to client management regarding moderately complex security issues
• Identifies and escalation changes that will affect information security policy, standards and procedures
• Works on complex problems where analysis of situations or data requires an in-depth evaluation of various factors
• Exercises judgment within broadly defined practices and policies in selecting methods, techniques, and evaluation criterion for obtaining results.
• Ability to pursue a proactive approach to problem solving within a cohesive team environment
• Build a strong techno-functional team.
• Ability to work in a fast-paced environment, good team player and can work independently.

Requirements

Education: B.E. / B Tech / M.E. / M Tech / M.C.A

Certifications : ISO 27001/42001/CISSP/CISA etc

Experience Range: 6 to 9 years

Foundational skills

• Vulnerability identification and evaluation of relevant evidence/artifacts
• Knowledge in the domain of information security and governance.
• Previous experience in handling QA process
• Previous experience in Secure by Design (SbD) methodology
• Stakeholder management
• Good understanding of Cloud/AI

Desired skills

• Change management process
• Identity & Access management
• Third-party/vendor management

Work Timings : 01.30 PM to 10.30 PM

Job Location : Gurugram/Hyderabad