Sr. Business Information Security Officer (BISO) - Payment Technology

Bank of America•Washington, DC

3d•$141,700 - $202,700•Onsite

About The Position

The Senior Information Security Officer is a member of Bank of America’s Business Information Security Office (BISO), aligned to Global Payment Solutions and its supporting Technology and Operations teams. The role partners with these Front-Line Units (FLUs) to help deliver business strategies securely and within risk appetite. It engages stakeholders at varying levels, requiring a deep understanding of the business to guide specialized, risk-based information security discussions and prioritize the right risks. The role also provides guidance on information security topics, policies, and controls. The position contributes to information security initiatives and improvements for FLU/Ops, serves as a subject matter expert, and advises on security investment priorities, risk issues, and recommended actions in support of the bank’s risk management and compliance programs. It monitors internal and external security trends, keeps leadership informed, manages quality control and reporting, and ensures compliance with policies and laws. The role drives GIS/FLU/Ops risk deliverables, collaborates with risk partners on critical information security priorities, participates in senior risk management and business continuity routines, and identifies and measures global information security controls for critical processes or channels. It builds partnerships with peer technology groups and supported FLU/Ops, supports client triage and understanding of the GIS support structure, and participates in operating routines that drive information security risk strategy.

Requirements

10+ years of experience as an information security and/or payments technology professional.
7+ years of risk management experience, with demonstrated ability to apply risk principles to challenging business situations.
3–5 years of experience evaluating cybersecurity controls and providing guidance for application, platform, or distributed computing platforms, as well as global regulatory and industry compliance frameworks and requirements such as HIPAA, SWIFT CSP, and PCI DSS.
Subject matter expertise in network and application security, vulnerability testing, authentication services, cryptography and key management, and development of risk appetite.
Experience with information security and/or architecture across varied technology types, including messaging, API gateways, and core payment rails.
Knowledge of Windows, Midrange, and Mainframe platforms, emphasizing security and access controls.
Exceptional executive presentation and communication skills, with strong influencing and problem-resolution abilities.
Ability to communicate effectively with people with varying levels of technical understanding.
Strong leadership skills and ability to work with peers and management at various levels.

Nice To Haves

Bachelor’s and/or master’s degree in Computer Science, Information Technology, or a related field.

Responsibilities

Help Global Payment Solutions and supporting Technology and Operations teams securely deliver their strategies within risk appetite.
Engage FLU stakeholders in risk-based information security discussions and help prioritize risks.
Provide guidance on information security topics, policies, and controls.
Contribute to information security initiatives and improvements for FLU/Ops and serve as an information security subject matter expert.
Advocate for and advise on prioritization of investments that affect information security.
Advise management on information security risk issues and recommend actions supporting risk management and compliance programs.
Monitor internal and external information security trends and keep leadership informed.
Manage quality control and reporting, and ensure compliance with policies and laws.
Drive GIS/FLU/Ops risk deliverables and collaborate with risk partners on critical information security priorities.
Participate in senior FLU/Ops risk management and business continuity routines.
Identify and measure global information security controls for critical business processes or channels.
Build relationships with peer technology groups and supported FLU/Ops.
Support the client triage process and explain the GIS support structure.
Promote the required risk culture and partnerships with peer technology teams and supported FLU/Ops.
Participate in key operating routines to drive information security risk strategy.