Information Security Consultant – Employee Experience Technology (EET)

Bank of America•Denver, CO

About The Position

The Information Security Consultant supports Bank of America’s Employee Experience Technology (EET) organization by balancing business objectives with effective information security risk management. The role develops an understanding of the Productivity, Collaboration, and AI technology landscape to identify, assess, and communicate cybersecurity risks while enabling secure business outcomes. The consultant partners with business stakeholders, risk teams, and Global Information Security (GIS) teams to provide practical, risk-based guidance throughout technology initiatives. Success requires strong communication skills, foundational security architecture knowledge, and the ability to work effectively with technical teams and senior business partners. The role supports security reviews of AI, automation, and emerging technology initiatives; identifies security, privacy, data protection, and governance risks; and helps ensure enterprise requirements are considered throughout project lifecycles. It also supports risk assessments, control reviews, remediation tracking, policy interpretation, security awareness, and secure adoption of productivity, collaboration, cloud, and AI technologies. This is a first-shift position with 40 hours per week. The listed work locations are Denver, Colorado; Washington, DC; and Chicago, Illinois. The annual salary range is $99,200–$145,000, with offers based on experience, education, and skill set. The role is eligible for an annual discretionary incentive plan and benefits, including paid time off.

Requirements

Experience in information security, technology risk management, information technology, or a related field.
Knowledge of cybersecurity principles, risk management practices, and security controls.
Understanding of cloud technologies, collaboration platforms, workplace productivity tools, and enterprise applications.
Familiarity with security architecture concepts and secure solution design practices.
Strong communication and relationship management skills, including the ability to engage technical and non-technical audiences.
Ability to communicate cybersecurity risks and recommendations clearly to business and technology stakeholders.
Strong analytical and problem-solving skills.

Nice To Haves

Experience supporting Microsoft 365, collaboration platforms, workplace technologies, or AI-enabled solutions.
Experience participating in architecture reviews, risk assessments, or technology governance activities.
Professional certifications such as Security+, CISSP Associate, CISM, CRISC, Azure Security Engineer, or similar cybersecurity credentials.

Responsibilities

Provide cybersecurity guidance to business leaders and risk champions for projects, initiatives, and operational activities.
Partner with business and technology stakeholders to understand objectives, identify risks, and recommend appropriate security controls.
Build an understanding of supported business functions, technology platforms, and strategic initiatives.
Support cybersecurity reviews of AI, automation, and emerging technology initiatives.
Identify security, privacy, data protection, and governance risks associated with AI-enabled solutions.
Work with project teams to consider AI security requirements and enterprise standards throughout the project lifecycle.
Promote secure and responsible use of AI technologies through risk-based guidance and awareness.
Identify, assess, and document information security risks across applications, platforms, and business processes.
Partner on risk and control matters to identify emerging security risks and remediation opportunities.
Facilitate risk reviews and control assessments, identify gaps, and recommend improvements.
Track remediation activities and support risk treatment plans.
Interpret cybersecurity policies, standards, and procedures and help stakeholders understand security requirements.
Drive adherence to information security controls that protect the confidentiality, integrity, and availability of information assets.
Promote awareness of current and emerging cybersecurity threats affecting productivity, collaboration, cloud, and AI technologies.
Support risk champion programs by helping stakeholders navigate cybersecurity processes and requirements.
Collaborate with GIS teams, architects, engineers, and business partners to address security concerns and support secure technology adoption.
Foster shared accountability for information security risk management.