Job Description:
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits. We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve. Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!
Job Description:
This job is responsible for assessing the bank's technologies, applications, and cyber security controls while adapting testing methods to evolving and emerging threats. Key responsibilities include performing research, understanding bank’s security policy, working with the appropriate partners to complete assessments and simulations, identifying misconfigurations and vulnerabilities and reporting on associated risk. Job expectations include partnering closely security partners, CIO clients and multiples lines of business.
Responsibilities:
- Performs assigned analysis of internal and external threats on information systems and predict future threat behavior
- Incorporates threat actors' tactics, techniques, and procedures into offensive security testing
- Performs assessments of the security, effectiveness, and practicality of multiple technology systems
- Leverages innovative thinking to help solve problems or introduce new ideas to processes or products applicable to offensive security
- Prepares and presents detailed technical information for various media including documents, reports, and notifications
- Provides clear and practical advice regarding managed risks
- Learns and develops advanced technical and leadership skills; Mentor Junior assessors in technical tradecraft and soft skill
Skills:
- Advisory
- Innovative Thinking
- Technical Documentation
- Technology System Assessment
- Threat Analysis
- Adaptability
- Collaboration
- Executive Presence
- Scenario Planning and Analysis
- Test Engineering
- Controls Management
- Information Systems Management
- Issue Management
- Mentoring
- Presentation Skills
Skills Required
- Experience performing offensive security testing and assessments
- Threat analysis and incorporation of TTPs (tactics, techniques, procedures)
- Experience assessing security controls across technology systems
- Technical documentation and reporting skills
- Ability to provide practical risk advice to stakeholders
- Experience mentoring junior assessors and developing technical leadership
- Collaboration with security partners, CIO clients, and business lines
- Presentation and executive communication skills
- Test engineering and controls management knowledge
What We Do
GHR Healthcare is a comprehensive healthcare staffing platform that connects healthcare professionals with facilities, providing nursing, allied, and healthcare IT staffing solutions.
