Strategic Information Security Officer – Global Markets

Bank of America; Washington (District of Columbia); On-site; USD 99,200 - 145,000; Full time

Benefits offered by this job

Annual discretionary plan

Benefits eligible

Job summary

Bank of America is seeking an Information Security Officer to join the Business Information Security Officer (BISO) organization. The ISO will partner with GBAM CIOs/CTOs and business stakeholders to understand objectives, technology strategy, and cybersecurity risks.

As a trusted advisor, you will provide strategic security guidance, challenge, and oversight to ensure risks are identified, assessed, and managed in line with policies, standards, and regulatory expectations, while enabling

Qualifications

• Experience in information security, cybersecurity engineering, technology risk management, security operations, or security consulting functions.
• Strong understanding of security controls, risk management practices, and cybersecurity frameworks applicable to enterprise systems, applications, cloud platforms, and network environments.
• Demonstrated ability to communicate, influence, and negotiate effectively with senior business and technology leaders.
• Strong analytical and problem-solving skills with the ability to assess risk and provide practical, business-aligned recommendations.
• Understanding of vulnerability management concepts, associated tooling, and remediation governance processes.
• Ability to independently manage competing priorities and oversee a diverse portfolio of work.
• Strong communication and stakeholder management skills, including the ability to deliver challenging messages and drive issue resolution.
• Proven ability to build relationships, establish credibility, and operate effectively across complex organizational environments.

Responsibilities

• Serve as the primary information security advisor and point of contact for assigned GBAM, providing guidance on cybersecurity risks, policies, standards, and controls.
• Act as a subject matter expert in the development, implementation, and ongoing oversight of information security practices within the line of business.
• Provide independent risk-based challenge and advisory support for technology initiatives, strategic programs, and implementation changes across the GBAM environment.
• Influence and advocate for the prioritization of investments that strengthen the organization's security posture and reduce risk.
• Advise business and technology leadership on cybersecurity risk issues and recommend actions that support the bank’s broader risk management, regulatory, and compliance objectives.
• Collaborate with Risk, Technology, and Control partners to enhance security processes, governance frameworks, and risk management capabilities.
• Partner with the Global BISO organization to ensure GIS policies, standards, requirements, and strategic initiatives are communicated, understood, and effectively implemented.
• Establish and maintain strong relationships across business, technology, risk, and control functions to facilitate effective security risk management.
• Conduct routine coordination with risk partners and technology teams to address vulnerabilities, control gaps, and remediation activities, with a focus on issues identified as elevated risk.
• Drive remediation efforts for cybersecurity issues and support stakeholders in achieving sustainable solutions aligned with GIS standards, baselines, and control requirements.
• Support ad hoc security consultations, risk assessments, governance activities, and executive reporting as required.

Skills

Information security

Cybersecurity engineering

Risk management

Communication

Analytical skills

Vulnerability management

Stakeholder management

Relationship building

Job description

Bank of America is seeking an Information Security Officer to join the Business Information Security Officer (BISO) organization. The ISO will partner with GBAM CIOs/CTOs and business stakeholders to understand objectives, technology strategy, and cybersecurity risks.

As a trusted advisor, you will provide strategic security guidance, challenge, and oversight to ensure risks are identified, assessed, and managed in line with policies, standards, and regulatory expectations, while enabling