Global Information Security Lead - GRC & Ops

BOA®; Denver (CO); Hybrid; USD 105,000 - 125,000; Full time

Benefits offered by this job

Healthcare plans

HSA funding

3 weeks PTO + paid family leave

401K match

Job summary

BOA Technology is seeking an Information Security Lead to coordinate BOA's global cybersecurity program, focusing on governance, risk, and compliance. The role combines strategic planning with hands-on security operations, including incident response, vulnerability remediation, and employee security awareness.

You will work with IT Ops and Business Systems Analysts to drive the security roadmap and ensure SOX ITGC alignment, in a hybrid Denver-based environment.

Qualifications

• Bachelor’s degree or equivalent in information security/IT.
• 5+ years in information security, IT risk, or IT operations.
• Experience applying NIST CSF 2.0, CIS Controls, or ISO/IEC 27001.
• Working knowledge of Windows, macOS, and Linux, with Microsoft security tech.
• Hands-on in monitoring, triage, and incident response actions.
• Strong understanding of networking, IAM, and cloud/security fundamentals.
• Excellent communication and cross-team coordination skills.

Responsibilities

• Reflect and role model BOA’s values in IT leadership and across the organization.
• Develop and execute BOA’s information security strategy and multi-year roadmap.
• Assess security program maturity using NIST CSF 2.0; coordinate assessments and remediation.
• Maintain security policies, standards, procedures, and risk registers.
• Oversee identity and access governance including SoD reviews.
• Coordinate evidence for SOX ITGC testing and remediation.
• Manage third-party cyber risk via vendor assessments and gaps.
• Lead security awareness programs, phishing simulations, and guidance.
• Oversee vulnerability management and remediation prioritization.
• Monitor security events; coordinate with external providers and internal teams.
• Maintain incident response procedures, DR exercises, and resilience testing.
• Report security metrics and material risks to IT and leadership.
• Monitor threats and regulatory developments; propose pragmatic improvements.

Skills

Security governance

Security operations

Incident response

Vulnerability management

SOX ITGC testing

Networking fundamentals

Identity and access management

Cloud and on-prem security

Communication & coordination

Education

Bachelor’s degree in Information Security/CS/IS or related field

Tools

Microsoft 365

Azure

Active Directory

Microsoft Entra ID

Intune

Microsoft Defender

Job description

BOA Technology is seeking an Information Security Lead to coordinate BOA's global cybersecurity program, focusing on governance, risk, and compliance. The role combines strategic planning with hands-on security operations, including incident response, vulnerability remediation, and employee security awareness.

You will work with IT Ops and Business Systems Analysts to drive the security roadmap and ensure SOX ITGC alignment, in a hybrid Denver-based environment.