Business Information Security Officer (BISO) - Technology

Bank of America; Washington (District of Columbia); On-site; USD 99,000 - 146,000; Full time

Job summary

A leading financial institution is seeking a Business Information Security Officer to enhance its security framework. This role involves close collaboration with technology teams and management to ensure compliance with security policies and to manage security risk across the organization.

Benefits

Paid time off

Performance-based incentives

Qualifications

• 2-5 years in technology, 5+ years in security.
• 1-2 years in risk management or related processes.
• Strong knowledge of specific LOB business (e.g., CSBB/GBM).

Responsibilities

• Contribute to information security initiatives and maintain security for the line of business.
• Advocate for line of business investment prioritization impacting security.
• Monitor security trends and inform leadership on relevant issues.

Skills

Application security

Vulnerability testing

System testing

Agile lifecycle

Risk management

Communication

Job description

Business Information Security Officer (BISO) - Technology

Locations: Washington, Chicago

Type: Full time

Posted: 13 Days Ago

Job Requisition ID: 25024277

Job Description:

At Bank of America, our purpose is to help make financial lives better through the power of every connection. Guided by Responsible Growth, we serve our clients, teammates, communities, and shareholders daily.

The Information Security Officer will be part of the Business Information Security Officer (BISO) team, working closely with the line of business, their COOs, and technology teams led by CIOs/CTOs.

This role involves developing a deep understanding of the business to facilitate risk-based security discussions, providing guidance on security policies, controls, and risk prioritization.

Responsibilities:

1. Contribute to information security initiatives and maintain security for the line of business (LOB).
2. Serve as an SME and liaison with GIS teams, supporting security program development and implementation.
3. Advocate for LOB investment prioritization impacting security.
4. Advise management on security risks and support risk management and compliance programs.
5. Monitor security trends and inform leadership on relevant issues.
6. Manage security control reporting to LOB leadership.

Risk Management:

1. Drive GIS/LOB risk deliverables.
2. Collaborate with risk partners on security priorities.
3. Participate in risk and business continuity routines.
4. Identify and measure critical security controls on key business processes.

Required Skills:

1. 2-5 years in technology, 5+ years in security.
2. Expertise in application security, vulnerability testing, system testing, or Agile lifecycle.
3. Strong knowledge of the specific LOB business (e.g., CSBB/GBM).
4. 1-2 years in risk management or related processes.
5. Excellent presentation and communication skills.

Additional Details:

• Shift: 1st shift (USA)
• Hours: 40/week
• Salary Range: $99,200 - $145,100 annually, based on experience.
• Benefits: Eligible for benefits, including paid time off and performance-based incentives.