Information Security Exposure Mgmt Sr Specialist

2 weeks ago

Denver, Colorado, United States Bank of America Full time

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us

This job is responsible for assessing the bank's technologies, applications, and overall security controls to identify potential risks and vulnerabilities that may impact Bank of America's information security. Key responsibilities include understanding and complying of the Bank s Global Information Security policy and relevant cyber security threats to complete security assessments. Job expectations include providing expert technical guidance to support partners and adapting testing methods to emerging cyber security regulations and evolving threats, while developing others on the team.

This critical Associate performs research, analysis, and testing of Core Infrastructure identified AITs leveraging industry standard baselines to identify potential ransomware and malware vulnerabilities that could be exploited by a threat actor. Ideal candidates will possess both a broad information security background and strong communications and interpersonal skills to engage with a variety of constituents. The associate may routinely work with technical (infrastructure) teams and SMEs on a variety of platform, database and operating systems. The candidate should have strong technical writing skills to produce understandable and actionable reports on diverse technical security and policy issues. The successful candidate will have a strong infrastructure security assessment background and be familiar with ransomware and malware, as well as current MITRE ATT&CK framework.

Responsibilities

As a CIAR - Info Security Exposure Mgmt. Specialist, the individual will be focused in the following areas:

  • Perform Critical Infrastructure Assurance Review (CIAR) process design and documentation.
  • Testing of Core Infrastructure identified AITs leveraging industry standard baselines to identify potential ransomware and malware vulnerabilities etc.
  • Works routinely with technical (infrastructure) teams and SMEs on a variety of infrastructure.
  • Complete the assigned work within the appropriate Service Level Agreement (SLA).
  • Exercise independent judgment in methods, techniques, and evaluation criteria for obtaining results.
  • Perform the assessment and perform pre-assessment examination of systems of record.
  • Finding of failed controls and submission of observations for continue monitoring.
  • Facilitates the collection of evidence with the FLU.
  • Perform level 1 QA and determine level of compliance.
  • Tracking and reporting of assessment status to leadership team.

Required Qualifications:

  • Experience in Information Security and/or IT Audit
  • Technical writing and verbal communication skill
  • Ability to effectively work with partners at varying knowledge and organization levels.
  • Ability to communicate clearly and effectively with both technology/development and business partners ability to translate between these two constituencies.
  • Highly organized and motivated to deliver results with minimal direction.
  • Creative and proactive problem solver ability to understand what the team needs and offer suggestions above and beyond what they desire.
  • Naturally curious individual with the ability to quickly become the authority in the various data and systems used by the team.
  • Strong relationship, team building and facilitation skills.
  • Good knowledge of current ransomware and malware threats and vulnerabilities, operating systems, database management and OSI Model.
  • Proficient with Microsoft Office (Word, PowerPoint, Excel), Tableau, SharePoint.

Desired Qualifications:

  • Information Security certifications, including ISO27002 / CISSP / CEH / CISM / CISA
  • Experience in coordinating team projects
  • Knowledge of NIST and NSA guidelines

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Shift:

1st shift (United States of America)

Hours Per Week:

40

  • Information Security Threat Mgmt Specialist

    8 hours ago

    Denver, Colorado, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...

  • Information Security Vulnerability Management Specialist

    5 days ago

    Denver, Colorado, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...

  • Information Technology Specialist

    4 weeks ago

    Denver, Colorado, United States Department Of Energy Full time

    Summary This position is part of the Department of Energy (DOE), Office of Intelligence and Counterintelligence. As an Information Technology Specialist supporting the DOE Counterintelligence (CI) mission, you will provide information technology (IT) expertise to DOE CI mission activities, including investigations, awareness, analysis, insider threat, cyber...

  • Human Resource Specialist

    1 month ago

    Denver, Colorado, United States Department Of Homeland Security Full time

    Summary Securing Travel, Protecting People - At the Transportation Security Administration, you will serve in a high-stakes environment to safeguard the American way of life. In cities across the country, you would secure airports, seaports, railroads, highways, and/or public transit systems, thus protecting America's transportation infrastructure and...

  • Human Resource Specialist

    1 month ago

    Denver, Colorado, United States Transportation Security Administration Full time

    CO Salary Range: USD 66, ,670.00 per yearOverviewHuman Resource SpecialistOpen & closing dates04/11/2024 to 04/22/2024Pay scale & gradeSV FAppointment typeSalary$66,670.00 to $86,670.00 PAWork scheduleLocationDenver, ColoradoDutiesSummarySecuring Travel, Protecting People - At the Transportation Security Administration, you will serve in a high-stakes...

  • Senior Information Security Officer

    5 days ago

    Denver, Colorado, United States Bank of America Full time

    Job Description:The Senior Information Security Officer will be a member of the Business Information Security Officer's (BISO) organization and work closely with the line of business Chief Information Officers (CIOs)/Chief Technology Officers (CTOs). In this role, you will be supporting a group/team to develop a deep understanding of the business in order to...

  • Cyber Security Engineering Sr Staff Engineer

    1 month ago

    Denver, Colorado, United States Synopsys Full time

    Sr.Staff Cyber Security Engineer48693BR USA - Arizona - Chandler, USA - Arizona - Tucson, USA - California - California, USA - California - Irvine, USA - California - Los Angeles, USA - California - Pasadena, USA - California - San Diego, USA - Colorado - Denver, USA - Colorado - Longmont, USA - Colorado - Westminster, USA - Florida - Oviedo, USA - Georgia -...

  • BISO Business Information Security Consultant

    7 days ago

    Denver, Colorado, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...

  • Business Information Security Officer/BISO

    2 days ago

    Denver, Colorado, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...

  • IT Security Specialist

    1 month ago

    Denver, Colorado, United States Judicial Branch Full time

    Summary The Office of the Circuit Executive for the Tenth Circuit Court of Appeals located in Denver, Colorado is seeking a qualified IT professional to serve as a member of the Department of Information Technology's circuit security team. Duties Working from a formal IT security plan, the team provides risk management, vulnerability management, and...

  • Information Security Vulnerability Analysis Manager

    1 week ago

    Denver, Colorado, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...

  • Senior Cyber Crime Specialist

    1 month ago

    Denver, Colorado, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...

  • Program Assistant

    1 month ago

    Denver, Colorado, United States Department Of Homeland Security Full time

    Summary Securing Travel, Protecting People - At the Transportation Security Administration, you will serve in a high-stakes environment to safeguard the American way of life. In cities across the country, you would secure airports, seaports, railroads, highways, and/or public transit systems, thus protecting America's transportation infrastructure and...

  • Vulnerability Identification Assurance Sr Analyst

    2 weeks ago

    Denver, Colorado, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...

  • Middleware & Database Vulnerability Scanning Specialist

    8 hours ago

    Denver, Colorado, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...

  • Security Operations Manager| Denver Tech Center

    1 month ago

    Denver, Colorado, United States teamworkonline Full time

    OverviewFor FT roles: Benefits: Health, Dental and Vision insurance, 401(k) savings plan, 401(k) matching, and paid time off (vacation days, sick days, and 11 holidays). This role will pay a salary of $65,000 to $75,000. For FT roles: Benefits: Health, Dental and Vision insurance, 401(k) savings plan, 401(k) matching, and paid time off (vacation days, sick...

  • Senior Security Engineer

    1 month ago

    Denver, Colorado, United States Bank of America Full time

    Job Description:The Information Security Engineer will lead strategic security efforts to expand technology offerings within the Merchant and Small Business technology portfolio. This role will work across various security and technology teams to define, drive, and deliver major security components to meet program objectives. Knowledge and experience with...

  • Sr. Test analyst

    3 days ago

    Denver, Colorado, United States Cognizant Technology Solutions Full time

    Sr. Test analyst /STB Tester Location: Denver, COJob Description:Should have experience in EC/DNCS experience – who can help with Headend testing, do HE config, channel maps etc. DAC experience – who can help with Headend testing, do HE config, channel maps etc. STB testers who can test video playout and STB functionality – both Charter (Spectrum, SARA...

  • DLP Could Security Engineer

    3 days ago

    Denver, Colorado, United States Bank of America Full time

    Job Description:At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our...

  • Cybersecurity Specialist

    1 month ago

    Denver, Colorado, United States Judicial Branch Full time

    Summary The Office of the Circuit Executive for the Tenth Circuit Court of Appeals located in Denver, Colorado is seeking a qualified Information Technology professional to serve as a member of the Department of Information Technology's Circuit Security team. Duties The security team, working from a formal IT security plan, provides risk management,...