Onsite Third-Party Cybersecurity Assessor

Bank of America; Denver (CO); On-site; USD 90,000 - 130,000; Full time

Job summary

Bank of America is seeking an information security professional to perform third-party security assessments, traveling to sites to review documentation such as playbooks and evidence, and documenting controls in assessment workpapers. The role requires evaluating third-party risk and communicating findings to relevant stakeholders.

Responsibilities include partnering with vendors, identifying gaps, and managing relationships with Enterprise Vendor Managers; travel up to 10–15% as needed to

Qualifications

• 2+ years of experience in information security and/or IT audit.
• Strong written and verbal communication skills.
• Ability to work with partners at varying knowledge levels.
• Ability to translate technical concepts for business partners.
• Familiarity with information security controls and standards.

Responsibilities

• Perform information security reviews of third parties providing services to the bank.
• Travel onsite with third parties to collect and review documentation.
• Assess security controls and document findings in workpapers.
• Escalate issues or risks identified during assessments.
• Manage relationships with vendors and Enterprise Vendor Managers.

Skills

InfoSec & IT Audit

Technical writing

Verbal communication

Stakeholder communication

Risk assessment

Job description

Bank of America is seeking an information security professional to perform third-party security assessments, traveling to sites to review documentation such as playbooks and evidence, and documenting controls in assessment workpapers. The role requires evaluating third-party risk and communicating findings to relevant stakeholders.

Responsibilities include partnering with vendors, identifying gaps, and managing relationships with Enterprise Vendor Managers; travel up to 10–15% as needed to