Bank of America Corporation

Info Security Controls Specialist

Bank of America Corporation • $90K — $110K *
Charlotte, NC 28269In-Person
Finance & Insurance
Less than 5 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • 5-7 years of experience in Information Security, Technology Risk, Compliance, or Security Controls in a large enterprise setting.
  • Strong understanding of risk management and regulatory compliance frameworks like NIST, COBIT, and ISO.
  • Experience in coordinating security and compliance deliverables across multiple applications.
  • Deep knowledge of vulnerability management and operational resilience processes.
  • Proven ability to work with Technology, Cybersecurity, and Audit teams for compliance outcomes.
  • Experience handling compliance activities for third-party applications.
  • Excellent analytical and communication skills, capable of managing priorities in regulated environments.

Responsibilities

  • Support the development of comprehensive information security policies and standards.
  • Engage with stakeholders to identify and mitigate information security risks.
  • Ensure IT systems comply with enterprise standards and relevant regulations.
  • Identify security gaps and propose remediation strategies.
  • Analyze IT systems to discover vulnerabilities and design improved processes.
  • Track compliance deliverables and assist with related administrative tasks.
  • Coordinate and support audits, risk assessments, and technology security activities.

Benefits

  • Opportunities for professional development and certifications.
  • Collaborative work environment with a focus on innovation and problem-solving.
  • Ability to impact enterprise-wide information security initiatives directly.
  • Exposure to financial industry regulations and compliance standards.
  • Dynamic and supportive team structure promoting career growth.
Full Job Description
Job Description:

This job is responsible for developing and supporting enterprise-wide information security policies, procedures, and standards. Key responsibilities include applying knowledge of laws, rules, regulations, and information security concepts (e.g., NIST, COBIT, ISO) to establish and maintain policies, validate alignment of processes and controls to requirements, and report on adherence to policy requirements. Job expectations include using data analytics and partnering with internal teams to verify policy compliance, identify gaps in coverage, and support remediation activities.

Position Summary:

This role is responsible for completing and tracking compliance deliverables to ensure applications adhere to applicable policies and standards as well as local laws, rules and regulations (LRR). Key responsibilities include completing administrative and non-technical tasks related to compliance deliverables and infrastructure requests for the applications they support. They support vendors, development teams and technology managers to ensure technical security, risk, and other compliance activities are completed on time and per requirements. These individuals partner closely with control functions, risk management and Global Information Security (GIS) and are familiar with the applicable policies, standards, LRRs, contacts and procedures so that the compliance deliverables are completed effectively and efficiently.

Responsibilities:
  • Supports development of enterprise-wide information security policies, procedures, and standards and industry leading information security reporting, risk scoring, and governance standards
  • Works with internal and external stakeholders including Line of Business delegates and regulators to mitigate and remediate information security risks
  • Ensures Information Technology systems meet enterprise standards, adhere to applicable rules, laws, and regulations, and comply with appropriate treatment of risk
  • Identifies information security gaps and remediation strategies
  • Analyzes existing Information Technology systems and processes to identify areas of vulnerability, provide mitigation tactics, and design and implement improved systems and processes
  • Ensure that risk, security, and other compliance deliverables are completed on time and per requirements for the applications they support.
  • Complete administrative and non-technical tasks related to compliance deliverables (for example, access reviews, assessments, questionnaires, procedural requirements, and so on).
  • Assist with audit exams and risk assessments for the applications.
  • Track and support the technical security and risk activities performed by the development teams (for example, remediation of non-permitted technology or security vulnerabilities, technical recovery planning, disaster recovery exercises, and so on).
  • Maintain data about the application in systems of record.
  • Work closely with vendors for vendor applications to ensure the application meets bank requirements.
  • Assist with ad hoc inquiries and questions about the application.
  • Interface with technology infrastructure teams for infrastructure requirements like requests for additional storage.


Required Qualifications
  • Proven experience in Information Security, Technology Risk, Compliance, or Security Controls within a large enterprise environment.
  • Strong understanding of information security policies, risk management, regulatory compliance, and control governance frameworks.
  • Experience coordinating and tracking security, risk, audit, and compliance deliverables across multiple applications or technology platforms.
  • Knowledge of vulnerability management, remediation tracking, access governance, disaster recovery, and operational resilience processes.
  • Experience supporting internal audits, regulatory examinations, risk assessments, and control testing activities.
  • Ability to partner effectively with Technology, Cybersecurity, Risk, Audit, and Infrastructure teams to drive compliance outcomes.
  • Experience managing compliance activities for vendor-supported or third-party applications.
  • Strong analytical, organizational, and problem-solving skills with attention to detail.
  • Excellent communication and stakeholder management skills, including the ability to influence and coordinate across diverse teams.
  • Ability to manage multiple priorities in a fast-paced, highly regulated environment while ensuring timely execution of control obligations.


Preferred Qualifications
  • Experience supporting enterprise payment, messaging, or critical financial infrastructure platforms.
  • Familiarity with information security standards, technology risk frameworks, and regulatory requirements in the financial services industry.
  • Professional certifications such as CISSP, CISM, CRISC, Security+, or equivalent.
  • Experience working with application lifecycle governance, security assessments, and audit remediation programs.


Skills:
  • Customer and Client Focus
  • Interpret Relevant Laws, Rules, and Regulations
  • Policies, Procedures, and Guidelines
  • Problem Solving
  • Quality Assurance
  • Business Acumen
  • Controls Management
  • Innovative Thinking
  • Process Management
  • Stakeholder Management
  • Business Process Analysis
  • Data Governance
  • Data Privacy and Protection
  • Data and Trend Analysis
  • Risk Analytics


Shift:
1st shift (United States of America)

Hours Per Week:
40

About Bank of America Corporation

Bank of America Merrill Lynch is the corporate and investment banking division of Bank of America. It provides services in mergers and acquisitions, equity and debt capital markets, lending, trading, risk management, research, and liquidity and payments management. It was formed through the combination of the corporate and investment banking activities of Bank of America and Merrill Lynch following the acquisition of the latter by the former in January 2009. Bank of America completed the acquisition of Merrill Lynch & Co on 1 January 2009. Bank of America began rebranding all of its corporate and investment banking activities under the Bank of America Merrill Lynch name in September 2009. In April 2010, Bank of America Merrill Lynch appointed Christian Meissner as head of investment banking for Europe, Middle East and Africa. In April 2011, Bank of America Merrill Lynch integrated its corporate and investment banking operations into a single division. In October 2013, Bank of America Merrill Lynch was recognised as the Most Innovative Investment Bank of the Year in The Banker's Investment Banking Awards.

Bank of America Corporation Careers

Join the dynamic team at Bank of America Corporation, a premier global financial institution where innovation, leadership, and growth go hand in hand. As one of the largest banks in the world, we offer unparalleled job opportunities and a culture that values diversity, inclusion, and professional growth. Work You’ll Do At Bank of America Corporation, you’ll be part of a team that’s dedicated to making a real difference. Whether you’re helping families buy their first home, advising businesses on expansion, or developing cutting-edge financial technologies, your work will have an impact. Our commitment to leadership in the financial industry has never been stronger, and we need passionate, skilled professionals to lead our journey. Explore a World of Opportunities From entry-level positions to leadership roles, Bank of America Corporation offers a variety of career paths in areas such as investment banking, technology, marketing, and risk management. Our job opportunities span the globe, providing the chance to work alongside the best in the industry and develop skills that will propel your career forward. Internship Programs Kickstart your career with Bank of America Corporation’s internship programs. These opportunities provide hands-on experience and a chance to engage in meaningful work that complements your academic studies. Interns gain invaluable networking opportunities, receive mentorship from seasoned professionals, and learn about the culture and operations of a global financial leader. Benefits and Growth Bank of America Corporation is committed to the well-being and continuous professional development of our team members. We offer a competitive benefits package that supports the health, financial stability, and work-life balance of our employees. Our training programs and development initiatives ensure that every team member has the opportunity to grow and advance within the company. Inclusive Culture We believe our strength lies in our diversity. Bank of America Corporation fosters an inclusive environment where all employees can thrive. Through diversity training and a commitment to equal opportunities, we cultivate leadership and innovation that reflect the wide-ranging communities we serve. Join Our Team Are you ready to advance your career at a company that’s at the forefront of the financial industry? Explore the positions available at Bank of America Corporation and find where your skills and interests align with our needs. We are continuously hiring and looking for individuals who are curious, creative, and eager to drive change. Stay Connected Keep up to date with the latest from Bank of America Corporation Careers by subscribing to our job alert emails. Tailor your subscription to receive updates that match your career interests and get insider tips that can help you during your application and interview process. Bank of America Corporation is not just a company—it’s a place where you can shape your future and the future of finance. Join us and be part of a team that’s redefining what a bank can be.
Learn more about Bank of America Corporation
Size
208,000 employees
Market Cap
$260.3 billion
Industry
Finance & Insurance
Net Income
$17.8 billion
Founded
1998
5 Year Trend
-1.4%
NASDAQ
BAC
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at Bank of America Corporation

More Finance & Insurance Jobs

Find similar Info Security Controls Specialist jobs:

NationwideCharlotte, NC