Third Party Cyber Assurance Technical Manager

Bank of America • Washington, DC

4d • Onsite

About The Position

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! Position Summary: The Third Party Cyber Assurance Tech Manager is responsible for managing a portfolio of assessors charged for executing information security assessments with the bank's third parties located within the United States, LATAM and Canada. In this role, you will provide tactical support to a team of assessors and ensure flawless execution throughout the assessment lifecycle. Additionally, you will be expected to maintain clear and consistent communication between their team and the LOB vendor management community regarding their assessments, as well as handle any escalation that may arise. Additional tasks include: Identification of process optimization opportunities, including technology and work flow enhancements Work across the assessment vertical to ensure processes are aligned to meet TPCA procedures end-to-end Assist with resource planning to ensure the program has the necessary resources to effectively execute their assessments Stay aware of emerging cybersecurity trends and help determine if/when to integrate item into the assessment program Support inquiries into the programs operations and/or assessment results from internal risk and support partners from GIS and the LOBs Previous information technology/security audit/assessment experience preferred. Strong attention to detail, analytical skills, ability to multi-task, and ability to work both independently as well as part of a due diligence team are also required. Must be able to plan, execute, and document assessment activities following established processes and procedures. Five to seven years’ experience in information security required. CISSP, CRISC, or CISA recommended.

Requirements

• Experience communicating to Sr. Management
• 5+ years experience in Information technology/security audit/assessments.
• Experience working within the risk framework to execute assessments
• Strong people management skills
• Ability to work independently on initiatives with little oversight; motivated and willing to learn
• Strong analytical skills/problem solving/conceptual thinking
• Must be comfortable in delivering messages across a wide spectrum of individuals having varying degrees of technical understanding
• Ability to direct personnel towards a set of goals and hold them accountable
• Experience developing and implementing new processes/procedures
• Experience working with global and/or virtual teams.

Nice To Haves

• Ability to work with Technical and Non-Technical business owners
• Experience in Sourcing/Vendor Management, Business Continuity & recovery, Data Transmission, Privacy domains
• Experience supporting regulatory or sector policy initiatives.
• Experience with assessments based on relevant threat intelligence (network penetration testing, Red Teaming, etc.).
• CISSP, CRISC, or CISA recommended.

Responsibilities

• Managing a portfolio of assessors charged for executing information security assessments with the bank's third parties located within the United States, LATAM and Canada.
• Provide tactical support to a team of assessors and ensure flawless execution throughout the assessment lifecycle.
• Maintain clear and consistent communication between their team and the LOB vendor management community regarding their assessments, as well as handle any escalation that may arise.
• Identification of process optimization opportunities, including technology and work flow enhancements
• Work across the assessment vertical to ensure processes are aligned to meet TPCA procedures end-to-end
• Assist with resource planning to ensure the program has the necessary resources to effectively execute their assessments
• Stay aware of emerging cybersecurity trends and help determine if/when to integrate item into the assessment program
• Support inquiries into the programs operations and/or assessment results from internal risk and support partners from GIS and the LOBs
• Plan, execute, and document assessment activities following established processes and procedures.

Benefits

• This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.
• This role is currently benefits eligible.
• We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 5,001-10,000 employees