Sr. Business Information Security Officer - Spanish and Portuguese

Bank of America Bank of America · Banking · Chicago, IL +2

Senior Business Information Security Officer for Global Payment Solutions at Bank of America, focusing on technology and operations in North and South American regions. Requires extensive experience in information security, risk management, and cyber security controls, with knowledge of global regulatory and industry compliance frameworks. The role involves advising management on risk, monitoring security trends, and ensuring compliance with policies and laws.

What you'd actually do

  1. This role will align to the Global Payment Solutions organization, and supporting Technology and Operations teams within our South and North American regions.
  2. This role will work closely with these Front-Line Units (FLUs) and LATAM and Canada Country Executives to securely deliver against the respective strategies and within risk appetite.
  3. This role will engage various levels across the FLUs and requires a deep understanding of the business to have specialized information security risk-based discussions.
  4. You will also provide guidance on information security topics, policies and controls.
  5. Contribute to the ongoing information security initiatives and improvements development, implementation and maintenance of information security for FLU/Ops

Skills

Required

  • Information Security and/or Payments Technology professional with 10+ years’ experience
  • 7+ years of risk management experience
  • 3-5 years experience evaluating cyber security controls and providing guidance for application, platform or distributed computing platforms, as well as global regulatory and industry compliance control frameworks and requirements (e.g., HIPAA, SWIFT CSP, PCI DSS, etc.)
  • Subject matter expertise in network and application security, vulnerability testing, authentication services, cryptography and key management and development of risk appetite
  • Experience with information security and/or architecture for a variation of technology types, including messaging, API gateways, and core payment rails
  • Knowledge in Windows, Midrange and Mainframe Platforms with emphasis on security and access controls
  • Exceptional executive presentation and communication skills
  • Strong leadership skills

Nice to have

  • Bachelors and/or Master’s degree in Computer Science, Information Technology or related field
  • Professional fluency in English, Spanish and Portuguese

What the JD emphasized

  • information security
  • risk management
  • cyber security controls
  • global regulatory and industry compliance control frameworks and requirements (e.g., HIPAA, SWIFT CSP, PCI DSS, etc.)