Third Party Cybersecurity Assurance (TPCA) Remediation Governance Lead

Company: Bank of America
Location: Chicago
Posted on: September 4, 2024

Job Description:

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We're devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

Position Summary

GIS Cyber Security Assurance (CSA) monitors remediation efforts to protect the confidentiality, integrity, availability of the line of businesses' (LOB) information assets. This role is a senior manager position, leading the Global TPCA Remediation Governance team - governing remediation of third party vendor information security findings identified by GIS TPCA assessments. The team supports SPI Process 107047, Remediate Vulnerabilities and Findings, specifically the Third Party Vendor Remediation Control, including metrics cascaded to FLU/CF's.

Key responsibilities:

• Establishes and maintains trusted relationships across GTPP, FLU's and GIS - engaging with Executives across the Bank, to drive remediation of findings
  
• Function as SME for all questions/domains on third party assessments, providing technical expertise and TPCA Process guidance
  
• Owns Process, Playbook and Procedural documentation
  
• TPCA Remediation Governance Strategy
  
• Lead, and participate in, calls across regions and functions demonstrating inclusivity and appreciation of diversity of ideas e.g. TPRGC, FLU Governance Routines, etc.
  
• Manage metrics and reporting, including Board/Management level risk appetite metrics and cascaded SPI QA Metrics, to reduce impact and exposure to legal, financial, reputational, operational, and regulatory risks.
  
• Identify and help implement ways to improve the function/team with an aim to improve team metrics and ultimately reduce risk
  
• Required to be available outside of core office hours, in case of emergencies
  
• Supports GCOR/Audit/Regulatory responses
  
  
  Required Qualifications:
  
  
  • Executive presentation and communication skills, including both written and verbal summaries
    
  • Strong leadership skills and qualities which enable you to work with various levels of management
    
  • Previous risk management experience with proven ability to effectively apply risk principles to business situations
    
  • Ability to deliver messages across a wide spectrum of individuals with varying degrees of technical understanding
    
  • Excellent influencing and problem resolution skills
    
    
    Desired Qualifications:
    
    
    • Cybersecurity certification, or relevant degree
      
    • Management experience
      
    • Experience with relevant applications, including Continuous Monitoring, TRAM, ROCK, GIS Dashboard and GIS Cloudera Data Visualizations
      
    • Knowledge of relevant GTPP and GIS Policies and Standards
      
    • Risk Committee/Forum presentation experience
      
    • Understanding of the eight lines of business
      
      
      This job will be open and accepting applications for a minimum of seven days from the date it was posted
      
      Job Band:
      H4
      
      Shift:
      1st shift (United States of America)
      
      Hours Per Week:
      40
      
      Weekly Schedule:
      
      Referral Bonus Amount:
      0
      --> Associated topics: attack, cybersecurity, forensic, identity, information security, leak, protect, security analyst, security engineer, security officer

Keywords: Bank of America, Chicago , Third Party Cybersecurity Assurance (TPCA) Remediation Governance Lead, Other , Chicago, Illinois