This job is closed
We regret to inform you that the job you were interested in has been closed. Although this specific position is no longer available, we encourage you to continue exploring other opportunities on our job board.
Bank of Americaposted 4 months ago
Full-time • Mid Level
Denver, CO
Credit Intermediation and Related Activities
About the position
The Third Party Cyber Assurance (TPCA) Assessor at Bank of America is responsible for conducting comprehensive information security assessments of third-party vendors. This role involves pre-assessment, assessment, and remediation activities, ensuring that vendors meet the bank's security requirements. The assessor will evaluate risks, coordinate with vendors, and communicate findings to senior leadership, contributing to the bank's commitment to responsible growth and security compliance.
Responsibilities
- Conduct information security assessments for third-party vendors.
- Evaluate third-party information security risks against Bank of America requirements.
- Partner with third parties to prepare for assessments and clarify evidence requirements.
- Identify and escalate risks related to third-party information security policies and standards.
- Manage relationships with internal and external stakeholders, including global teams and business units.
- Support audit, compliance, or regulatory requests with timely responses.
Requirements
- Ability to objectively assess information from various sources and synthesize it for technical judgment.
- Previous experience in information technology/security audit or assessment is preferred.
- Technical knowledge in information security controls, IT compliance, and enterprise risk management.
- Familiarity with NIST, PCI, ISO, SDLC, COBIT, and ITIL standards.
- Experience in reviewing endpoint protection and cloud implementation controls.
- Strong communication skills to interact with technology and business partners effectively.
- Excellent technical writing and verbal communication skills in English.
- Strong organizational and administrative skills to manage multiple assessments.
Nice-to-haves
- Information Security certifications such as ISO27002, CISSP, CEH, CISM, or CISA.
- Knowledge of NIST guidelines.
Benefits
- Opportunities for career growth and development.
- Support for physical, emotional, and financial wellness.
