Business Information Security Officer (BISO) Engagement Senior Lead Denver, Colorado;Washington, District of Columbia; Chicago, Illinois **Job Description:** At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day. One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being. The BISO Engagement Senior Lead role supports a specific vertical Business Information Security Office and is responsible for the management and oversight for a variety of BISO-CIO governance activities. This role is responsible for partnering with the BISO Executive to balance the needs of the business while ensuring information security risk is appropriately identified and managed to mitigate risk to the organization and drive uncompromising cyber security protection. Specifically, this role is to provide and implement horizontal consistency across a variety of BISO processes and activities. The role is to serve as main point of contact for each BISO vertical Executive, acting as an integrated business partner with cross-functional senior leaders to provide blended security and business expertise to ensure appropriate management of information security risks. This role will be responsible for overseeing and contributing to all BISO related materials that go to the Global Tech Risk Committee, CIO Key Risk Routines, and FLU Risk Committees. Additionally, this role will Identify and drive implementation of opportunities for efficiencies across BISO teams including developing best practices within the vertical BISO team across various processes and procedures, including, but not limited to, ERP Exceptions, Third Party Non-Adherence Oversight, Consequence Model, Operating procedures, Key Risk Routines, FLU Risk Committee, etc. **Required Skills** • 5+ years as an Information Security / Technology professional within a highly-regulated industry • 5+ years of risk identification experience • Strong sense of ownership and accountability • Exceptional executive presence and experience discussing complex issues with technical and non-technical leaders • Exceptional Written Presentation Skills and experience • Ability to adjust and react with optimism and professionalism- solution oriented • Attention to detail • Able to work in a fast-paced, multi-priority environment • Strategic thinking – high-potential ideation beyond what has succeeded in the past • Leverages established laws, rules, regulations, and policy to rationalize decisions – comfortable providing feedback to internal policy owners when asked • Proficiency with Jira Service Manager, Application HQ, enterprise tollgate tools (ex. CECE, GCGF Intake, PTS/R), and various GIS reporting tools (ex. Tableau, Continuous Monitoring, RSAM, Trident) • Influencer – energized by sharing fresh methodology, and leading others to adoption of improvements • Critical thinking – one of the first who: grasps new concepts, understands the connections between BISO portfolio of work and that of other teams, and sees potential pit-falls **Desired Skills** • Bachelors and/or Master’s degree in Computer Science, Information Technology or related field • Third Party experience within a highly regulated industry • CISSP, CISM, or PCI Professional certifications This job is responsible for partnering with leaders to balance the needs of the business while ensuring information security and organizational risks are appropriately identified and managed to drive uncompromising cyber security protection. Key responsibilities include leading in-depth information security risk-based discussions and acting as an integrated business partner with cross-functional leaders to provide blended security and business expertise to ensure appropriate management of information security risks. This job will be open and accepting applications for a minimum of seven days from the date it was posted. **Shift:** 1st shift (United States of America) **Hours Per Week:** 40 Bank of America and its affiliates consider for employment and hire qualified candidates without regard to race, religious creed, religion, color, sex, sexual orientation, genetic information, gender, gender identity, gender expression, age, national origin, ancestry, citizenship, protected veteran or disability status or any factor prohibited by law, and as such affirms in policy and practice to support and promote the concept of equal employment opportunity and affirmative action, in accordance with all applicable federal, state, provincial and municipal laws. The company also prohibits discrimination on other bases such as medical condition, marital status or any other factor that is irrelevant to the performance of our teammates. To view the "EEO is the Law" poster, CLICK HERE (https://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf) . To view the "EEO is the Law" Supplement, CLICK HERE (https://www.dol.gov/ofccp/regs/compliance/posters/pdf/OFCCP\_EEO\_Supplement\_Final\_JRF\_QA\_508c.pdf) . View the LA County Fair Chance Ordinance (https://dcba.lacounty.gov/wp-content/uploads/2024/08/FCOE-Official-Notice-Eng-Final-8.30.2024.pdf) . Bank of America aims to create a workplace free from the dangers and resulting consequences of illegal and illicit drug use and alcohol abuse. Our Drug-Free Workplace and Alcohol Policy (“Policy”) establishes requirements to prevent the presence or use of illegal or illicit drugs or unauthorized alcohol on Bank of America premises and to provide a safe work environment. To view Bank of America’s Drug-free Workplace and Alcohol Policy, CLICK HERE . This communication provides information about certain Bank of America benefits. Receipt of this document does not automatically entitle you to benefits offered by Bank of America. Every effort has been made to ensure the accuracy of this communication. However, if there are discrepancies between this communication and the official plan documents, the plan documents will always govern. Bank of America retains the discretion to interpret the terms or language used in any of its communications according to the provisions contained in the plan documents. Bank of America also reserves the right to amend or terminate any benefit plan in its sole discretion at any time for any reason.