Information Security Officer - Cloud & App Risk Lead

Bank of America; Denver (CO); Hybrid; USD 99,000 - 145,000; Full time

Job summary

Bank of America is seeking an Information Security Officer to join the BISO organization, partnering with GBS LOBs to focus on information security risk discussions and controls. You will guide risk priorities and provide subject-matter expertise across security topics and SDLC considerations.

Role emphasizes collaboration with technology leaders, risk management processes, and strong communication. In-office culture with role-based flexibility and career development opportunities.

Qualifications

• Requires 2-5 years in technology and 5+ years in information security.
• Experience in application development or application security (2-5 years).
• Cloud implementations experience in Azure, AWS and GCP.”
• Subject matter expertise in application security, vulnerability testing, system testing, and/or Agile lifecycle management.
• Strong line-of-business knowledge for the bank’s respective business line.

Responsibilities

• Contribute to ongoing information security initiatives and improvements; develop, implement and maintain security for the line of business.
• Provide guidance on information security topics, policies and controls.
• Advise management on risk issues related to information security and actions to support risk/compliance programs.

Skills

Controls Management

Cyber Security

Data Governance

Information Systems Management

Risk Management

Architecture

Customer and Client Focus

Executive Presence

Threat Analysis

Vendor Management

Self- Starter

Emotional Intelligence

Education

Bachelor's and/or Master’s degree in Computer Science, Information Technology or related field

Job description

Bank of America is seeking an Information Security Officer to join the BISO organization, partnering with GBS LOBs to focus on information security risk discussions and controls. You will guide risk priorities and provide subject-matter expertise across security topics and SDLC considerations.

Role emphasizes collaboration with technology leaders, risk management processes, and strong communication. In-office culture with role-based flexibility and career development opportunities.