Information Security Cyber Exercise Planner

Job Description :

The Global Information Security organization is responsible for protecting bank information systems, confidential and proprietary data, and customer information. The team:

• Develops the bank’s Information security strategy and policy
• Manages the Information security program and identifies and addresses vulnerabilities
• Develops, deploys and manages a risk-based controls portfolio
• Manages and operates a global security operations center that monitors, detects and responds to cybersecurity incidents

What We’re Looking For:

We’re looking for the next generation of Cyber security experts – those with a passion for growing a long-term career, building relationships and working with a team of innovative and forward thinking information security professionals. Our cyber team is meant for those looking to make a real impact and build a career in information security. The role is ideal for those who have a passion to work with industry leaders to protect our brand and the customer/client experience by proactively detecting, disrupting, and mitigating cyber security across the organization.

We’ll help you:

• Build a successful career at Bank of America through world-class training and on-boarding programs that set you up for success
• Grow in your current role through one-on-one coaching from managers who are invested in your success and training programs that help you excel, build new skills or take on additional responsibility
• Continuously learn and advance your career goals through intentional career paths to the next best role
• Use resources and innovative technologies to optimize the client experience
• Expand your business knowledge and network by partnering with experts in Global Information Security, Global Technology and other lines of business
• Become an expert in what you do

What you can look forward to:

• Ongoing professional development to deepen your skills and optimize your expertise as the industry evolves and changes
• Resources and dedicated support to help you reach your full potential throughout your career
• A benefits program designed to meet the diverse needs of our employees at every stage of their life and help them plan for tomorrow
• Progressive workplace practices and initiatives that promote inclusion

We’re a culture that:

• Believes in responsible growth and has a proven dedication to supporting the communities we serve.
• Provides continuous training and developmental opportunities to help people achieve their goals, whatever their background or experience.
• Believes diversity makes us stronger, so we can reflect, connect to and meet the diverse needs of our clients and customers around the world.
• Is committed to advancing our tools, technology, and ways of working. We always put our clients first to meet their evolving needs.

Required Skills:

• Have a foundational understanding of information technology and security concepts
• Have a foundational understanding of exercise and text concepts used to evaluate staff skill levels, operational risk and security effectiveness
• Ability to capture actions taken by the exercise participants through direct observation, monitoring of communications between participants and direct interaction with participants. Analyze the data and provide realistic and insightful conclusions
• Ability to design executive level summaries aimed at driving action and demonstrating success
• Have a strong sense of teamwork that enables you to work with peers and various levels of management
• Effective written and oral communication skills in both group and individual settings
• Ability to facilitate and control a room of people and guide them through the exercise in order to achieve the goals
• Proven record of being able to navigate successfully across organizational lines
• Ability to communicate threat actor techniques, tactics and procedures (verbal and written) with executives and stakeholders in non-technical terms while accurately encompassing risk, impact likelihood, containment and remediation activities
• Excellent organizational and analytical skills with an ability to prioritize conflicting tasks and handle multiple work efforts in a fast paced environment
• Experience in an operations focused Information Security role
• Familiarity with network security vulnerabilities, exploits and attacks