Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

The Cyber Threat Resolution Analyst plays an essential role in the Cyber Threat Defense Framework. The Resolution Analyst will manage key relationships with action owners, as they work closely with the Cyber Threat Evaluation and Prevention organization to identify strategies for resolving and mitigating cybersecurity risks to bank controls. They prioritize time effectively and collaborate with others to lead the discovery of opportunities and implement data-driven solutions. Additionally, this role supports the Resolution lead in enhancing cyber defense capabilities by addressing threats, incidents, and issues across the bank. 

The Team:
The Cyber Threat Evaluation and Prevention (CTEP) team evaluates threats and emerging risks, assesses cybersecurity controls, and defines actions for risk reduction. The four key steps in the cyber threat defense process are: threat intake, control evaluation, resolution, and quality assurance. The CTEP program integrates across Global Information Security, leveraging current risk assessments and control testing to identify gaps for action by Control Owners, Action Owners, and/or Policy/Standard owners. The program aims to evaluate and enhance Bank of America’s risk and control environment for cybersecurity threats and emerging risks.

Analysts leverage their expertise and creative problem-solving skills to drive engagement with action owners across diverse global technology teams. They play a pivotal role in representing threats accurately and ensuring that risk remediation efforts are executed in a manner the effectively addresses the identified risks. Operating within a collaborative and transparent environment, analysts contribute to a culture of continuous improvement and proactive response to cybersecurity challenges. 

Typical job duties are: 
• Examine threat evaluation information and engage control owners to resolve issues, address vulnerabilities and reduce risk by driving remediation work.
• Reduce risk by driving remediation work in alignment with the known threat environment.
• Work with relevant control owners/teams to understand and identify areas for improvement on the identification of and recovery from information security threats and incidents.

Required Skills:
• Knowledge and experience with information security controls
• Strong data analysis 
• Strong communication skills and relationship management
• Ambitious, disciplined, hardworking, resilient, and willing to learn.
• Highly organized project management skills. 

Desired Skills: 
• Bachelor’s degree in Information Technology, Business Administration, or related field
• Ability to work with technical and non-technical business owners.
• Proficiency with Jira

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Shift:

Hours Per Week: