Business Information Security Officer (BISO) - Global Banking and Markets Technology

Bank of America; Falls Church (VA); On-site; USD 99,000 - 146,000; Full time

Job summary

A leading financial institution is seeking a Business Information Security Officer to enhance information security practices. This role involves advising senior management on risk strategies and developing security solutions within a busy banking environment, ensuring compliance with internal policies while fostering effective stakeholder relationships.

Benefits

Discretionary annual incentive

Paid time off

Growth resources

Qualifications

• Experience in information security operations, engineering, or consulting.
• Strong interpersonal skills for communicating with senior stakeholders.
• Mid to senior level experience with application security controls.

Responsibilities

• Develop and maintain information security for the line of business.
• Advise management on security risks and recommend mitigation actions.
• Collaborate with risk teams to develop security processes.

Skills

Information security operations

Interpersonal skills

Application security controls

Risk management

Vulnerability management

Job description

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities, and shareholders every day.

Join us and build a successful career with opportunities to learn, grow, and make an impact.

Business Information Security Officer (BISO) Role

The BISO will be a key member of the BISO organization, working closely with the Global Banking and Markets (GBAM) CIOs/CTOs to understand the business and engage in specialized, risk-based information security discussions. This role ensures focus on the right risk priorities and acts as the primary contact for guidance on information security policies, controls, and topics, ultimately serving as a trusted advisor to stakeholders.

Responsibilities include:

• Developing, implementing, and maintaining information security for the line of business (LOB).
• Advising LOB management on security risks and recommending mitigation actions.
• Providing oversight and guidance on security changes within the GBAM environment.
• Collaborating with risk teams and supporting the development of security processes and solutions.
• Ensuring effective communication and tracking of GIS requirements and initiatives.
• Building and maintaining a network of stakeholders and partners.
• Coordinating remediation efforts for GIS issues, ensuring resolution aligns with standards.

Required Skills

• Experience in information security operations, engineering, or consulting, with knowledge of controls and processes for systems and networks.
• Strong interpersonal skills to communicate, influence, and negotiate with senior stakeholders.
• Experience at a mid to senior level with application security controls and risk management.
• Understanding of vulnerability management and monitoring practices.

Desirable Skills

• Experience with formal security risk assessment methodologies.
• Technical understanding of technology infrastructure and operations.
• Previous experience in a financial institution.
• Ability to manage priorities independently and communicate effectively, including delivering difficult messages.

This position is open for applications for at least seven days from the posting date.

Additional Details

Shift: 1st shift (U.S. time)

Hours per week: 40

Compensation and Benefits

Salary range: $99,200 - $145,100 annually, based on experience and skills.

Eligible for discretionary annual incentive and benefits, including paid time off and resources to support your growth and community impact.