Information Security Officer: Cloud, Risk & AppSec Lead

Colorado Psychiatric; Denver, Northern (CO, KY); Hybrid; USD 99,000 - 145,000; Full time

Benefits offered by this job

Benefits eligible

Annual discretionary plan

Job summary

Bank of America seeks an Information Security Officer within the BISO team to partner with the Global Business Services and Technology Leaders, shaping risk discussions and security controls across lines of business.

You will bring 5+ years in information security, 2-5 years in technology, and deep expertise in application security, cloud platforms (Azure, AWS, GCP), and risk management. The role emphasizes leadership, communication, and policy guidance.

Qualifications

• 2-5 years of experience in technology and 5+ years in information security.
• Experience with cloud implementations in Microsoft Azure, AWS and GCP environments.
• Subject matter expert in application security, vulnerability testing, system testing, or Agile lifecycle management.
• Strong LOB knowledge and 1-2 years of risk management experience or participation in risk processes.

Responsibilities

• Contribute to ongoing information security initiatives for the LOB; develop, implement and maintain security.
• Serve as information security SME and advise on risk prioritization in GIS/LOB context.
• Provide guidance on security topics, policies and controls to stakeholders.
• Monitor security trends and keep partners informed about issues and risk.
• Ensure compliance with policies and laws and manage quality control and reporting.

Skills

Controls Management

Cyber Security

Data Governance

Information Systems Management

Risk Management

Architecture

Customer and Client Focus

Executive Presence

Threat Analysis

Vendor Management

Self-Starter

Emotional Intelligence

Education

Bachelor's or Master's degree in Computer Science or Information Technology

Job description

Bank of America seeks an Information Security Officer within the BISO team to partner with the Global Business Services and Technology Leaders, shaping risk discussions and security controls across lines of business.

You will bring 5+ years in information security, 2-5 years in technology, and deep expertise in application security, cloud platforms (Azure, AWS, GCP), and risk management. The role emphasizes leadership, communication, and policy guidance.