Job Description:
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.
Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!
Job Description:
This job is responsible for developing and supporting enterprise-wide information security policies, procedures, and standards. Key responsibilities include applying knowledge of laws, rules and information security concepts (e.g., NIST, COBIT, ISO) to establish and maintain policies, validate alignment of processes and controls to requirements, and report on adherence to policy requirements. Job expectations include using data analytics and partnering with internal teams to verify policy compliance, identify gaps in coverage, and support remediation activities.
Responsibilities:
- Supports development of enterprise-wide information security policies, procedures, and standards and industry leading information security reporting, risk scoring, and governance standards
- Works with internal and external stakeholders including Line of Business delegates and regulators to mitigate and remediate information security risks
- Ensures Information Technology systems meet enterprise standards, adhere to applicable rules, laws, and regulations, and comply with appropriate treatment of risk
- Identifies information security gaps and remediation strategies
- Analyzes existing Information Technology systems and processes to identify areas of vulnerability, provide mitigation tactics, and design and implement improved systems and processes
Skills:
- Customer and Client Focus
- Policies, Procedures, and Guidelines
- Problem Solving
- Quality Assurance
- Controls Management
- Innovative Thinking
- Interpret Relevant Laws, Rules, and Regulations
- Process Management
- Stakeholder Management
- Business Acumen
- Business Process Analysis
- Data Privacy and Protection
- Data and Trend Analysis
- Risk Analytics
Skills Required
- Knowledge of information security concepts and frameworks, including NIST, COBIT, or ISO
- Knowledge of applicable laws, rules, regulations, and data privacy requirements
- Ability to develop and maintain information security policies, procedures, and standards
- Experience analyzing IT systems and processes to identify vulnerabilities and security gaps
- Ability to support risk remediation and mitigation activities
- Data and trend analysis, risk analytics, and reporting skills
- Stakeholder management and business process analysis skills
GHR Healthcare Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about GHR Healthcare and has not been reviewed or approved by GHR Healthcare.
-
Fair & Transparent Compensation — Pay is considered competitive for many travel and clinical roles, with opportunities to select higher‑paying shifts or assignments that align to financial goals. Reliable weekly pay and direct deposit are also highlighted.
-
Healthcare Strength — Benefits materials indicate comprehensive medical, dental, vision, prescription, and HSA/FSA options for eligible employees. Professional liability and workers’ compensation coverage are also provided.
-
Retirement Support — A 401(k) with company matching is positioned as a core strength of the offering. This feature is emphasized for eligible corporate staff and W‑2 clinicians.
GHR Healthcare Insights
What We Do
GHR Healthcare is a comprehensive healthcare staffing platform that connects healthcare professionals with facilities, providing nursing, allied, and healthcare IT staffing solutions.







