Info Security Consultant II A

Bank of America Corporation; Indiana; On-site; USD 32,000 - 43,000; Full time

Job summary

Bank of America Corporation is seeking a seasoned information security professional for the Global Information Security office in India. The role supports the BISO Governance and Execution team, driving risk-based controls, vulnerability mitigation, and enterprise security testing across lines of business and third parties.

The position requires 8+ years in cyber security, strong analytical skills, and experience with governance, risk and compliance processes.

Qualifications

• Bachelor's Degree or Masters in IT/Cyber Security preferred.
• 8+ years of experience in cyber security domain.
• Certifications such as CompTIA+, CISA, CRISC, CISM are desirable.

Responsibilities

• Support BISO Governance to ensure risk is mitigated across lines of business and third parties.
• Review framework strategies to apply consistent risk management and mitigations.
• Handle GIS Exception tickets and enterprise browser testing, onboarding and troubleshooting.

Skills

Information security

Risk management

Communication skills

Analytical thinking

Governance, Risk & Compliance

Incident management

Project management

Collaboration

Education

Bachelor's Degree or Masters in IT/Cyber Security

Tools

ServiceNow

Python

Job description

About Us

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates' physical, emotional, and financial wellness through affordable, competitive and flexible benefits. We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve. Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Global Business Services

Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations. Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence and innovation. In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services.

Process Overview

The Global Information Security (GIS) is responsible for protecting Bank information systems, confidential and proprietary data, and customer information. The team develops the Bank's Information Security strategy and policy, manages the Information Security program and identifies and addresses vulnerabilities, Develops, deploys and manages a risk-based controls portfolio, Manages and operates a global security operations center that monitors, detects and responds to cybersecurity incidents.

Job Description

This position will be a member of the Business Information Security Office (BISO) Governance and Execution team. The role requires executing against the quality assurance strategy to validate cyber security risk is being mitigated appropriately across lines of business as well as Third Parties. This role will support the BISO Governance team, Review Framework Strategy to ensure a consistent risk management process is being leveraged when assessing vulnerability risks by ensuring that appropriate mitigations and/or compensating controls are applied. Also, should be able to handle GIS Exception tickets and new enterprise browser testing, onboarding, troubleshooting etc.

Responsibilities

• Strong background in information security and risk management


• Good knowledge in tickets processing, handling escalations, bridge calls etc.


• Skilled in requirement analysis, test plan/scenario preparations, design and execution, defect logging and management


• Self-starting, organized, and requiring minimal management oversight


• Strong analytical skills/problem solving/conceptual thinking/attention to detail


• Ability to work effectively with peers and various levels of management


• Well organized and thorough, with the ability to balance and prioritize


• Excellent verbal and written communication skills across multiple levels of the organization

Requirements

Education : Bachelor's Degree or Masters from IT/Cyber Security preferred

Certifications If Any : CompTIA+, CISA, CRISC, CISM

Experience Range : 8+ Years

Foundational skills

• Minimum 4 years of experience in cyber security domain


• GRC (Risk & Compliance) process and tools


• Automation (Python, etc.)


• Good experience in ticketing tools (Service Now preferred)


• Security Incident management, Service Delivery Management


• Knowledge/Experience in Application security, Risk assessments, Cloud technologies, GRC (Governance, Risk, and Compliance)


• Experience evaluating threats/risks posed by new technologies spanning networks, hardware, software,


• Ability to evaluate technology ensure cyber-secure development that adheres to internal application policy, standards, and baselines.

Desired skills

• Good knowledge in Tickets processing, Incident management


• Hands on experience in Automation, API Integrations


• Strong project management experience


• Strong analytical skills/problem solving/critical thinking.


• Able to work with technical and non-technical business owners.


• Able to take ownership of an initiative/issue through completion.


• Able to work in a collaborative environment.


• Able to own and deliver on complex initiatives in a high paced, evolving environment.


• Excellent verbal and written communication skills;


• Ability to communicate with business leaders and stakeholders.


• Proficient in MS Office (Word, Excel, PowerPoint)


• Ability to work with minimal supervision and must be flexible to work on shifts mentioned below

Work Timings

Shifts between 6:30 AM to 23:00 Hours, including On-call support during weekends in rotation

Job Location

Chennai, Mumbai