Bank of America Corporation
Location
Chennai | India
Job description
About Us
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities, and shareholders every day.
One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.
Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.
Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!
Global Business Services
Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations.
Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence, and innovation.
In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services.
Process Overview
Global Information Security (GIS) is responsible for protecting bank information systems, confidential and proprietary data, and customer information. GIS develops the bank’s Information Security strategy and policy, manages the Information Security program, identifies and addresses vulnerabilities and operates a global security operations center that monitors, detects and responds to cybersecurity incidents. Within GIS, the Cloud Security organization is responsible for leading a team of deeply technical cyber security engineers and architects to design and implement best in class cyber security capabilities for internal and external cloud instances in partnership with infrastructure and application technology teams. In addition, lead efforts across other Global Information Security functions to enable cyber security technology and operations in cloud environments.
Job Description
- Cloud Data Security Strategy: Develop and implement a comprehensive data security, IAM & overall AI strategy for cloud environments, aligning it with the organization’s business goals and compliance requirements
- Data Protection: Oversee data protection measures, including encryption, access controls, and data masking, to safeguard sensitive data stored in the cloud
- Team Leadership: Lead and mentor a team of data security professionals, fostering a culture of excellence, innovation, and continuous improvement
- Cloud Data Security Solution Development: Oversee the development and implementation of data security solutions for cloud environments
- Risk Assessment: Conduct risk assessments and provide strategic guidance to mitigate data security threats in cloud environments
- Collaboration: Collaborate with cross-functional teams, including engineering, data science, and product management, to integrate AI-driven security solutions into our products and services
- Compliance: Ensure compliance with data protection regulations (e.g. GDPR, CCPA) and industry standards in cloud environments
- Security Monitoring: Implement and oversee data security monitoring and alerting solutions to detect and respond to data security threats
- Vendor assessment: Evaluate and manage third-party vendors providing data security solutions for cloud environments
- Security Awareness: Promote data security awareness and best practices across the organization through training and awareness programs
- IAM Integration: Collaborate with CSPs and internal teams to integrate IAM solutions seamlessly into cloud environments
- Operational management of Cloud IAM, management of related external tools, technical and process documentation, monitoring and metrics
- Identify opportunities for process optimization, automation, and innovation within the IAM framework to enhance security, user experience, and operational efficiency.
- Designing, implementing, and managing IAM solutions in cloud environments
- Strong understanding of cloud security architecture, IAM protocols, authentication mechanisms, and role-based access control
- Problem-solving skills and the ability to analyze complex technical issues and provide effective solutions
- Collaborate across departments and present complex security concepts to non-technical stakeholders
- Security Architecture: Develop and implement robust security architecture for cloud environments, ensuring the protection of data, applications, and systems
- Security Operations: Oversee day-to-day security operations in the cloud, including threat detection, incident response, and vulnerability management
- Secure DevOps: Collaborate with DevOps teams to integrate security into the software development and deployment lifecycle
- Security Tooling: Evaluate and implement security tools and technologies to enhance cloud security capabilities
- Incident Response: Lead the response to security incidents and breaches in cloud systems, coordinating with relevant teams.
- Training and Development: Provide training and professional development opportunities to security engineering team members.
- Technology Innovation: Keep abreast of emerging AI and cloud security technologies and trends to identify opportunities for innovation
- Team Leadership: Recruit, mentor, and manage a high-performing team of AI and security experts
- AI Solution Development: Oversee the development and implementation of AI-driven security solutions for cloud environments, including threat detection, anomaly detection, and automated incident response
- Performance Metrics: Establish and monitor key performance indicators (KPIs) to measure the effectiveness of AI-based security solutions and report on progress to executive leadership
Requirements
Education: B.E. / B. Tech/M.E. /M. Tech
Certifications, If Any: CCSP Certification, Cloud Security Certifications from AWS, Azure and Google
Experience Range: 12 – 16 years
Foundational Skills:
- Hands on experience with design and implement cloud security architecture in on-premises based Private Cloud and Public cloud platforms such as Azure, AWS & Google Cloud
- Monitor cloud environment for security threats and integrate with incident response
- Implement Identity Management and Access control policies through research
- Secure Cloud data and applications using CASB (Cloud Access Security Brokers) solutions
- Stay up-to date with emerging security threats and implement appropriate security measures
- Experience in DevSecOps model with infra-as-code, config-as-code, policy-as-code etc
- Experience in writing Hashicorp Terraform configurations and modules
- Knowledge of current and upcoming cloud security/network technologies (e.g IPS, DDoS, SIEM, WAF etc) and understanding of compliance and regulatory standards
- Understanding of landing zones, cloud native security, monitoring and logging tools like Splunk, Prometheus etc
- Experience in Cloud IAM, network and Security design
- Advance knowledge of Single-Sign On (SSO), Federated Identities and Active Directory
- Knowledge of common Information Security frameworks, relevant legal & regulatory requirements like NIST Cybersecurity, CIS controls, SOX and Data Security standard
- Strong cyber thought leader and strategist who can influence at very senior levels of the organization
- Inspires teams across GIS, GT, and control partners to deliver together
- Strong interpersonal skills, ability to make effective presentations and communicate technical concepts to non-technical parties
- Exhibits executive leaderships behaviors when addressing organizational conflict and removing roadblocks to effective delivery
- Strong relationship management skills to navigate the complexities of gaining buy-in and building consensus
Desired Skills:
- Excellent communication, influencing and facilitation skills with deep intellectual curiosity and innovative thinker
- Demonstrate neutral objectivity and seek the best outcome for the business. Enterprise mindset; considers E2E process impact when evaluating opportunities/challenges
- Maximizes organizational capability with a demonstrated commitment to valuing diversity
Work Timings: General Shift (1:30 p.m. to 10:30 p.m.)
Job Location: Chennai / Mumbai/ Hyderabad
Job tags
Salary
