Information Security Consultant – Employee Experience Technology (EET)

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

This role supports Employee Experience Technology (EET) organization by balancing business objectives with effective information security risk management. The position is responsible for developing a strong understanding of the Productivity, Collaboration, and AI technology landscape to identify, assess, and communicate cybersecurity risks while enabling secure business outcomes.

The successful candidate will partner with business stakeholders, risk teams, and Global Information Security (GIS) teams to provide practical risk-based guidance throughout the lifecycle of technology initiatives. This role requires strong communication skills, foundational security architecture knowledge, and the ability to engage effectively with both technical teams and senior business partners.

Required Qualifications

• Experience in information security, technology risk management, information technology, or a related field.

• Knowledge of cybersecurity principles, risk management practices, and security controls.

• Understanding of cloud technologies, collaboration platforms, workplace productivity tools, and enterprise applications.

• Familiarity with security architecture concepts and secure solution design practices.

• Strong communication and relationship management skills with the ability to engage technical and non-technical audiences.

• Ability to communicate cybersecurity risks and recommendations clearly to business and technology stakeholders.

• Strong analytical and problem-solving skills.

Desired Qualifications

• Experience supporting Microsoft 365, collaboration platforms, workplace technologies, or AI-enabled solutions.

• Experience participating in architecture reviews, risk assessments, or technology governance activities.

• Professional certifications such as Security+, CISSP Associate, CISM, CRISC, Azure Security Engineer, or similar cybersecurity credentials.

Responsibilities

• Business and Technology Partnership

• Support business leaders and risk champions by providing cybersecurity guidance for projects, initiatives, and operational activities.

• Partner with business and technology stakeholders to understand objectives, identify risks, and recommend appropriate security controls.

• Build an understanding of supported business functions, technology platforms, and strategic initiatives.

• AI and Emerging Technology Risk Management

• Support cybersecurity reviews of Artificial Intelligence (AI), automation, and emerging technology initiatives.

• Identify potential security, privacy, data protection, and governance risks associated with AI-enabled solutions.

• Partner with project teams to ensure AI security requirements and enterprise standards are considered throughout the project lifecycle.

• Promote secure and responsible use of AI technologies through risk-based guidance and awareness.

Cybersecurity Risk Management

• Assist in identifying, assessing, and documenting information security risks across applications, platforms, and business processes.

• Serve as a risk and control partner to help identify emerging security risks and remediation opportunities.

• Facilitate risk reviews and control assessments to identify gaps and recommend improvements.

• Track remediation activities and support risk treatment plans.

Governance, Policy, and Compliance

• Interpret cybersecurity policies, standards, and procedures and help stakeholders understand security requirements.

• Drive adherence to information security controls designed to protect the confidentiality, integrity, and availability of information assets.

Security Awareness and Collaboration

• Promote awareness of current and emerging cybersecurity threats impacting productivity, collaboration, cloud, and AI technologies.

• Support risk champion programs by helping stakeholders navigate cybersecurity processes and requirements.

• Collaborate with GIS teams, architects, engineers, and business partners to address security concerns and support secure technology adoption.

• Foster a culture of shared accountability for information security risk management.

Success Factors

• Effectively partners with project teams to identify and address cybersecurity risks early in the lifecycle.

• Demonstrates sound judgment when balancing security requirements with business objectives.

• Supports the secure adoption of Productivity, Collaboration, and AI technologies.

• Communicates cybersecurity risks clearly and influences positive security outcomes.

Skills:

• Controls Management
• Cyber Security
• Data Governance
• Information Systems Management
• Risk Management
• Architecture
• Customer and Client Focus
• Executive Presence
• Threat Analysis
• Vendor Management
• Advisory
• Business Acumen
• Business Intelligence
• Cloud Solutions
• Technology System Assessment

Shift:

1st shift (United States of America)

Hours Per Week: 

40

Pay Transparency details

US - CO - Denver - 1144 15th St - Denver Gis (CO9926), US - DC - Washington - 1800 K St NW - 1800 K Street NW (DC1842), US - IL - Chicago - 540 W Madison St - Bank Of America Plaza (IL4540)

Pay and benefits information

Pay range

$99,200.00 - $145,000.00 annualized salary, offers to be determined based on experience, education and skill set.

Discretionary incentive eligible

This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.