Information Security Consultant – Employee Experience Technology (EET)
About The Position
At Bank of America, this role supports the Employee Experience Technology (EET) organization by balancing business objectives with effective information security risk management. It develops an understanding of the Productivity, Collaboration, and AI technology landscape to identify, assess, and communicate cybersecurity risks while enabling secure business outcomes. The successful candidate partners with business stakeholders, risk teams, and Global Information Security (GIS) teams to provide practical, risk-based guidance throughout the lifecycle of technology initiatives. The role calls for strong communication skills, foundational security architecture knowledge, and the ability to engage effectively with technical teams and senior business partners. Bank of America describes its culture as inclusive and supportive of teammate development and wellness. The company is committed to an in-office culture that supports collaboration, engagement, and career development, with flexibility based on role responsibilities and business needs.
Requirements
- Experience in information security, technology risk management, information technology, or a related field.
- Knowledge of cybersecurity principles, risk management practices, and security controls.
- Understanding of cloud technologies, collaboration platforms, workplace productivity tools, and enterprise applications.
- Familiarity with security architecture concepts and secure solution design practices.
- Strong communication and relationship management skills, with the ability to engage technical and non-technical audiences.
- Ability to communicate cybersecurity risks and recommendations clearly to business and technology stakeholders.
- Strong analytical and problem-solving skills.
Nice To Haves
- Experience supporting Microsoft 365, collaboration platforms, workplace technologies, or AI-enabled solutions.
- Experience participating in architecture reviews, risk assessments, or technology governance activities.
- Professional certifications such as Security+, CISSP Associate, CISM, CRISC, Azure Security Engineer, or similar cybersecurity credentials.
Responsibilities
- Support business leaders and risk champions by providing cybersecurity guidance for projects, initiatives, and operational activities.
- Partner with business and technology stakeholders to understand objectives, identify risks, and recommend appropriate security controls.
- Build an understanding of supported business functions, technology platforms, and strategic initiatives.
- Support cybersecurity reviews of artificial intelligence (AI), automation, and emerging technology initiatives.
- Identify potential security, privacy, data protection, and governance risks associated with AI-enabled solutions.
- Partner with project teams to ensure AI security requirements and enterprise standards are considered throughout the project lifecycle.
- Promote secure and responsible use of AI technologies through risk-based guidance and awareness.
- Assist in identifying, assessing, and documenting information security risks across applications, platforms, and business processes.
- Serve as a risk and control partner to help identify emerging security risks and remediation opportunities.
- Facilitate risk reviews and control assessments to identify gaps and recommend improvements.
- Track remediation activities and support risk treatment plans.
- Interpret cybersecurity policies, standards, and procedures and help stakeholders understand security requirements.
- Drive adherence to information security controls designed to protect the confidentiality, integrity, and availability of information assets.
- Promote awareness of current and emerging cybersecurity threats impacting productivity, collaboration, cloud, and AI technologies.
- Support risk champion programs by helping stakeholders navigate cybersecurity processes and requirements.
- Collaborate with GIS teams, architects, engineers, and business partners to address security concerns and support secure technology adoption.
- Foster a culture of shared accountability for information security risk management.
Benefits
- Industry-leading benefits
- Access to paid time off
- Annual discretionary incentive plan eligibility
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Education Level
No Education Listed
