Job Description

:About UsAt Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. Were devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!Global Business ServicesGlobal Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations. Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence and innovation. In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services.Process OverviewThe Global Information Security (GIS) is responsible for protecting Bank information systems, confidential and proprietary data, and customer information. The team develops the Banks Information Security strategy and policy, manages the Information Security program, identifies, and addresses vulnerabilities, Develops, deploys and manages a risk-based controls, portfolio, Manages and operates global security operations center that monitor, detect and respond to cybersecurity incidents.Security and Solutions Design Program Governance team is seeking an analytical thinker to execute on the Business Information Security Office Central Intake Framework within the Secure by Design Evaluation (SBDE) program. This important role stands at the front door of requests for approval from Global Information Security (GIS), and functions as a hub gathering information from enterprise tollgate requests to GIS, enterprise technology data sources, Central Threat Defense Framework routines, and governance evaluations required by GIS Senior Leadership Team. This key team members work will require subject matter expertise in the scope of bank enterprise tollgates, understanding of potential information security impact of technical changes (including inter Tableau, Continuous Monitoring, RSAM, Trident)pretation of conceptual technology design diagrams), and comfort with communicating concisely with the intent to discover details and ensure that finalized requests provided to GIS contain accurate and consistent information from a variety of sources.Responsibilities

• In this role, youll be accountable for managing a wide variety of activities day-to-day, including:
• Determining scope of GIS requirements for SBDEs via analysis of security-relevancy of proposed technical changes, and mapping potential security impact to the appropriate GIS assessment
• Mitigate stakeholder pushback which can lead to review delays by educating a variety of stakeholders to facilitate understanding of GIS requirement scope designed to reduce security risk of technology changes
• Apply knowledge of Global Policy standards and procedures, within GIS Policy and other policy areas, which are relevant to GIS review requests -provide feedback on the impact these policies may have on scoping SBDE
• Learning continuously from security issues, industry best practices, and technological design patterns to evolve and enhance the Central Intake Framework
• Keep up-to-date with technology partner processes/requirements, GIS assessments and processes related to SBDE
• Use SSD tools to track, prioritize, and report on concerns regarding the SBDE processes or any process or tool which may impact SBDE
• Prioritize and execute a complex, high-volume process
• You will be successful in this role with these attributes:
• Strong problem solver with drive to take ownership of, and resolve, challenges
• Concise verbal and written communication skills, with executive presence
• Excel at operating with minimal management oversight
• Proficiency with Jira Service Manager, Application HQ, enterprise tollgate tools (ex. CECE, GCGF Intake, PTS/R), and various GIS reporting tools (ex. Tableau, Continuous Monitoring, RSAM, Trident)
• Early-adopter and change-agent who enjoys meeting rapidly changing business needs, managing competing priorities, and applying critical thinking in all situations

RequirementsEducation: Bachelors Degree or technology and cybersecurity backgroundCertification: CISSP (ISC2), CISA, CRISC, CISM (ISACA), CCIE (Cisco), TOGAF, CCTA (McAfee), CCFP (ISC2).Experience Range: 8 - 11 yearsFoundational skills:Hands on Experience on knowledge on Secure by Design (SBD) framework, Information security, risk assessment, knowledge about GIS/Information security policies and industry best practices such as NISTDesired skills:Proficiency in Excel, JIRA and GIS tools like Tableau, RSAM, Trident and knowledge about threat monitoring etc;Work Timings: 13:30 - 22:30 HoursJob Location: Hyderabad/Mumbai

Bank of America