B

Third Party Info Security Consultant - Merchant Analyst

Bank of America
Full-time
On-site
Addison, Illinois, United States
Cyber Security Consultant

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being a diverse and inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Job Description:

This job is responsible for performing information security reviews of merchants, such as pre-assessment, assessment, and remediation activities that are clients of the bank. Key responsibilities include validating assessment scope, partnering with merchants to prepare them for the assessment, collecting and reviewing documentation of their assessment, determining if appropriate information security controls are in place based on the assessment documentation, and completing an assessments of workpapers.

Responsibilities:

  •  Manages relationships with assigned merchants

  • Partners with merchants to answer detailed questions and ensure they are prepared for information security assessments

  • Evaluates a merchant’s information security risk with a holistic lens by performing review of assessment documentation

  • Identifies and discusses any information security gaps in the merchant’s program with the merchant

  • Escalates security issues or risks identified during the review of the assessment documentation     

Required Qualifications:

  • Intimate familiarity with the PCI-DSS standard

  • Data Privacy and Protection

  • Information Systems Management

  • Critical thinking and Problem Solving

  • Technology System Assessment

  • Business Continuity Management

  • Customer and Client Focus

  • Cyber Security

  • ISA (Internal Security Assessor) Certification through the PCI SSC (if not at hiring within 1 year of hire date)

Minimum Educational Requirements: BA Degree or equivalent work experience

Skills:

  • Critical Thinking

  • Data Privacy and Protection

  • Information Systems Management

  • Problem Solving

  • Technology System Assessment

  • Business Continuity Management

  • Customer and Client Focus

  • Cyber Security

  • Oral Communications

  • Solution Delivery Process

  • Access and Identity Management

  • Architecture

  • Consulting

  • Encryption

  • Vendor Management

Shift:

1st shift (United States of America)

Hours Per Week: 

40