Strategic Business Information Security Officer

Bank of America; Washington (District of Columbia); On-site; USD 99,000 - 145,000; Full time

Benefits offered by this job

Benefits eligible

Job summary

Bank of America is seeking a Business Information Security Officer to partner with CFO and Global Risk Management. The role focuses on translating security risks into business impacts, guiding controls, and coordinating across business, technology, and risk teams to support finance governance and regulatory compliance.

The position emphasizes strategic risk management, cloud and data protection knowledge, and strong communication to influence decision-making, with in-office expectations and some

Qualifications

• 1. Controls Management.
• 2. Cyber Security.
• 3. Data Governance.
• 4. Information Systems Management.
• 5. Risk Management.
• 6. Architecture.
• 7. Customer and Client Focus.
• 8. Executive Presence.
• 9. Threat Analysis.
• 10. Vendor Management.

Responsibilities

• Develop and implement information security practices for CFO and GRM functions.
• Serve as liaison between business, technology and information security teams.
• Support reviews, risk exceptions, control assessments, remediation activities, governance processes.
• Provide input on strategic initiatives, tech modernization, and vendor engagements.
• Prepare information security reporting and risk summaries for management.
• Monitor threats, controls, and risk trends relevant to supported functions.

Skills

Controls Management

Cyber Security

Data Governance

Information Systems Management

Risk Management

Architecture

Customer and Client Focus

Executive Presence

Threat Analysis

Vendor Management

Job description

Bank of America is seeking a Business Information Security Officer to partner with CFO and Global Risk Management. The role focuses on translating security risks into business impacts, guiding controls, and coordinating across business, technology, and risk teams to support finance governance and regulatory compliance.

The position emphasizes strategic risk management, cloud and data protection knowledge, and strong communication to influence decision-making, with in-office expectations and some