Information Security Executive

Job Description:

Job Title: EMEA Regional Information Security Executive

Corporate Title: Up to Senior Vice President

Location: London or Chester

Company Overview:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Location Overview:

London

Our London office is based just a stone’s throw from the magnificent St. Paul’s Cathedral on bustling King Edward Street. Here you’ll find modern workspaces and a state-of-the-art auditorium space. In addition, we’re proud to host an onsite restaurant that shares our commitment to sustainability by providing delicious seasonal menus which have been created with the planet in mind. Make sure to take time for yourself and head up to our rooftop terrace and take in the spectacular views across London. Finally, your physical wellness is well-catered for with our onsite gym facilities and medical centre.

Chester

Find us in the city of Chester, a destination renowned for its culture, history, and beauty. Working at Bank of America Chester offers a far-reaching global career for a world-renowned organisation, whilst being ideally situated against the backdrop of the rolling North Wales hills and the banks of the serene River Dee.

Role Description:

This is a rare opportunity to shape the information security agenda for Bank of America across Europe, the Middle East and Africa. As the newly created EMEA Regional Information Security Officer (RISO), you will serve as the senior Global Information Security (GIS) leader for the region, setting strategic direction, leading regulatory engagement and owning oversight of information security risk across a diverse, complex and highly regulated footprint.

Reporting to the International Information Security Executive, you will lead the EMEA team of Country Information Security Officers and act as a trusted partner to business executives and senior leaders across Technology, Risk, Compliance, Audit and Legal, ensuring cyber and information security risks are clearly understood, robustly governed and decisively addressed.

This is a highly visible, enterprise-critical role. You will shape regional regulatory engagement, advise country management teams and legal entity boards, and represent GIS with regulators and external stakeholders. Above all, you will translate global security strategy into regional action, ensuring the organisation stays ahead of evolving threats, regulatory expectations and business priorities.

Responsibilities:

Regional Leadership and Strategy

Own the execution of GIS strategy, priorities and operating plans across EMEA, with full accountability for regional outcomes.

Provide visible leadership and clear direction to Country Information Security Officers across the region.

Translate global information security objectives into regionally effective programmes and operating routines.

Act as the senior voice of GIS within regional leadership forums and governance structures.

Regulatory Engagement and Country Oversight

Lead and oversee regulatory engagement across EMEA on information security matters.

Ensure the region is fully prepared for regulatory reviews, examinations and information requests.

Anticipate regional regulatory developments and emerging supervisory expectations, positioning the bank ahead of change.

Guide and support Country ISOs in their engagement with local regulators and legal entity management teams.

Set the standard for consistent regulatory responses, governance practices and risk reporting across jurisdictions.

Escalate significant regulatory concerns and thematic issues to the International RISO and GIS leadership, with clear recommendations.

Information Security Risk Management

Own oversight of regional information security risk management across EMEA.

Ensure key cyber risks, vulnerabilities and control weaknesses are identified, tracked and remediated with appropriate urgency.

Partner with Technology, Business, Risk and Compliance leaders to drive meaningful risk reduction and remediation.

Maintain a clear line of sight on material regional cyber threats and emerging risks.

Provide senior oversight and steady leadership during significant cybersecurity incidents affecting EMEA entities or operations.

Country Information Security Management

Lead and coordinate the network of Country Information Security Officers across EMEA.

Provide governance, direction and constructive challenge to country information security activities.

Ensure Country ISOs have the capability, guidance and support needed to meet local regulatory obligations.

Promote consistent, high-quality execution of information security oversight across countries and legal entities.

Align country-level information security priorities with broader GIS objectives.

Stakeholder Management and Influence

Build trusted relationships with regional executives, legal entity boards and control partners.

Serve as the senior information security adviser to regional management teams, influencing decisions at the highest level.

Partner with Enterprise Risk, Compliance, Audit and Legal leadership to address regulatory and risk management priorities.

Contribute to the bank's engagement with industry, government and public-private sector partnerships focused on cyber resilience and information security.

Leadership and People Development

Lead, mentor and develop a geographically distributed team across multiple jurisdictions.

Foster a culture of accountability, collaboration and continuous improvement.

Build a diverse, high-performing team aligned with GIS leadership principles.

Strengthen the GIS talent pipeline across EMEA, developing the next generation of security leaders.

What we are looking for:

A senior leader with extensive experience in information security, cyber risk management, technology risk, operational risk or a related field.

Significant experience operating at a senior level within highly regulated financial services environments.

Deep understanding of information security governance, regulatory frameworks and cyber risk management practices.

A proven track record of engaging with and influencing regulators, board members and senior executives.

Proven leadership of geographically distributed teams, with the ability to set direction and drive accountability at scale.

Strong command of regional and global cybersecurity threats and associated control environments.

The ability to influence across complex, matrixed organisations and deliver outcomes through partnership and collaboration.

Exceptional communication, stakeholder management and board-level presentation skills.

Strong strategic thinking, sound judgement and decisive problem-solving capabilities.

Skills that will help:

CISSP, CISM or equivalent industry certifications.

Experience supporting multinational financial institutions.

Knowledge of European regulatory frameworks, including DORA, NIS2, ECB expectations and country-specific requirements.

Experience managing regulatory examinations and re