Information Security Third Party Remediation Assessor
Job Description
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection.
Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.
One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We're devoted to being a diverse and inclusive workplace for everyone.
We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.
Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.
Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!
The Third Party Remediation Assessor is responsible for executing information security assessment remediation with the bank's third parties.
In this role, you will ensure flawless execution throughout the remediation lifecycle, as you work with bank third parties to address their information security gaps.
Additionally, you will be expected to maintain clear and consistent communication between the bank, the vendor, and the LOB vendor management community regarding the assessments, as well as handle any escalations that may arise.
Previous information technology / security audit / assessment experience preferred. Strong attention to detail, analytical skills, ability to multi-task, and ability to work both independently as well as part of a due diligence team are also required.
Must be able to plan, execute and document assessment remediation activities following established processes and procedures.
Five to seven years' experience in information security required. CISSP, CRISC, or CISA recommended.
Required Qualifications
Experience communicating to Sr. level management
Experience working within the risk framework to remediate
Strong portfolio management skills
Ability to work independently on initiatives with little oversight. Motivated and willing to learn.
Strong analytical skills / problem solving / conceptual thinking.
Must be comfortable in delivering messages across a wide spectrum of individuals having varying degrees of technical understanding
Ability to direct personnel towards a set of goals and hold them accountable.
Experience working with global and / or virtual teams
Desired Qualifications
Ability to work with Technical and Non-Technical business owners
Information Security, Sourcing / Vendor Management, Business Continuity & recovery, Data Transmission, Privacy
Experience supporting regulatory or sector policy initiatives.
Experience with assessments based on relevant threat intelligence (network penetration testing, Red Teaming, etc.).
This job will be open and accepting applications for a minimum of seven days from the date it was posted.
Shift
1st shift (United States of America)
Hours Per Week
Information Security Third Party Remediation Assessor
The Third Party Remediation Assessor is responsible for executing information security assessment remediation with the bank's third parties. In this role, you will ensure flawless execution throughout the remediation lifecycle, as you work with bank third parties to address their information securit...
Information Security Third Party Remediation Assessor
The Third Party Remediation Assessor is responsible for executing information security assessment remediation with the bank's third parties. In this role, you will ensure flawless execution throughout the remediation lifecycle, as you work with bank third parties to address their information securit...
Information Assurance/Security Assessor Expert (TS/SCI w/Poly required)
Gather and organize technical information about an organization's mission goals and needs, existing security products, and ongoing programs in cybersecurity . Plan, execute and report on information technology, privacy, and operational reviews in order to identify mission, privacy, security, complia...
Information Security Onsite Risk Assessor
Discusses any information security gaps in the third party’s program with their SME(s). Information Security Controls (Infrastructure Security, Access Management, Application Security, etc. Partners with third parties to ensure they are prepared for information security assessments including answeri...
Information Security Cloud Remediation Lead - Senior Info Security Officer
Key responsibilities include leading in-depth information security risk-based discussions and acting as an integrated business partner with cross-functional leaders to provide blended security and business expertise to ensure appropriate management of information security risks. This job is responsi...
Software Engineers - All Levels - Security Clearance Required
Software Engineers – All Levels. Candidate will be responsible for engineering, executing & supporting the deployment for Ground Software applications deployed in WebLogic server. ...
Network Engineer, Stf / Secret Clearance / Onsite (CO preferred) - Security Clearance Required
The candidate will be a Network Engineer for a brand-new enterprise WAN solution: DarkStar! The candidate will be responsible for the successful implementation, integration and support of a multi-site classified network with a variety of different locations and vendor hardware. Responsibilities for ...
Cyber Security Engineer - Security Clearance Required
Interface with the Program Management Office (PMO) and Information System Security Engineer (ISSE) while completing security controls implementation, self-compliance tests, security test plans, and creating/updating the Plan of Actions and Milestones (POA&M). We are seeking a passionate Information ...
Now Hiring - Security Officer
As a Security Officer, you will serve and safeguard clients in a range of industries such as Commercial Real Estate, Healthcare, Education, Government and more. Allied Universal®, North America’s leading security and facility services company, provides rewarding careers that give you a sen...
Principal/Sr. Principal Cyber Systems Engineer - CDS - Security Clearance Required
The selected Cyber Systems Engineer will have experience with Cybersecurity implementations based on DoD, National Institute of Standards and Technology (NIST), Committee on National Security Systems Instruction (CNSSI), and Risk Management Framework (RMF) processes, policies and guidelines. Princip...