Info Security Consultant II A

Job Description:

About Us

• At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.
• Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.
• We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.
• Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.
• At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Global Business Services

Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations. Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence and innovation. In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services.

Process Overview

The Global Information Security (GIS) is responsible for protecting Bank information systems, confidential and proprietary data, and customer information. The team develops the Bank’s Information Security strategy and policy, manages the Information Security program and identifies and addresses vulnerabilities, Develops, deploys and manages a risk-based controls portfolio, Manages and operates a global security operations center that monitors, detects and responds to cybersecurity incidents.

Job Description

This position will be a member of the Business Information Security Office (BISO) Governance and Execution team. The role requires executing against the quality assurance strategy to validate cyber security risk is being mitigated appropriately across lines of business as well as Third Parties. This role will support the BISO Governance team, Review Framework Strategy to ensure a consistent risk management process is being leveraged when assessing vulnerability risks by ensuring that appropriate mitigations and/or compensating controls are applied. Also, should be able to handle GIS Exception tickets and new enterprise browser testing, onboarding, troubleshooting etc.

Responsibilities

Strong background in information security and risk management

Good knowledge in tickets processing, handling escalations, bridge calls etc.

Skilled in requirement analysis, test plan/scenario preparations, design and execution, defect logging and management

Self-starting, organized, and requiring minimal management oversight

Strong analytical skills/problem solving/conceptual thinking/attention to detail

Ability to work effectively with peers and various levels of management

Well organized and thorough, with the ability to balance and prioritize

Excellent verbal and written communication skills across multiple levels of the organization

Requirements

Education : Bachelor’s Degree or Masters from IT/Cyber Security preferred

Certifications If Any : CompTIA+, CISA, CRISC, CISM

Experience Range : 8+ Years

Foundational skills

Minimum 4 years of experience in cyber security domain

GRC (Risk & Compliance) process and tools

Automation (Python, etc.)

Good experience in ticketing tools (Service Now preferred)

Security Incident management, Service Delivery Management

Knowledge/Experience in Application security, Risk assessments, Cloud technologies, GRC (Governance, Risk, and Compliance)

Experience evaluating threats/risks posed by new technologies spanning networks, hardware, software,

Ability to evaluate technology ensure cyber-secure development that adheres to internal application policy, standards, and baselines.

Desired skills

• •Good knowledge in Tickets processing, Incident management
• •Hands on experience in Automation, API Integrations
• •Strong project management experience

Strong analytical skills/problem solving/critical thinking.

Able to work with technical and non-technical business owners.

Able to take ownership of an initiative/issue through completion.

Able to work in a collaborative environment.

Able to own and deliver on complex initiatives in a high paced, evolving environment.

• •Excellent verbal and written communication skills;
• •Ability to communicate with business leaders and stakeholders.

Proficient in MS Office (Word, Excel, PowerPoint)

Ability to work with minimal supervision and must be flexible to work on shifts mentioned below

Work Timings : Shifts between 6:30 AM to 23:00 Hours, including On-call support during weekends in rotation

Job Location : Chennai, Mumbai