Info Security Consultant II

Bank of America

. Oversee remediation of information security findings identified during third-party assessments .

Posted 10/19/2026full-timeChennai • IndiaSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information Security Management, Governance, Risk & Compliance, and effective remediation of security findings. Proven ability to lead teams, manage stakeholder relationships, and execute risk assessments while ensuring compliance with industry standards.

Highest-signal resume keywords

Information Security ManagementGovernance, Risk & ComplianceRisk Assessment & RemediationISO 27001 ImplementationLeadership & Stakeholder Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentRemediationProcess ImprovementVulnerability AssessmentsCloud SecurityNetworkingSystems AdministrationCryptographyAccess ManagementThreat-Informed Security Assessments

Soft Skills

Analytical SkillsProblem-SolvingWritten CommunicationVerbal CommunicationGlobal Collaboration

Certifications & Qualifications

ISO 27001 LACISACISMCISSP

Industry Keywords

Compliance ActivitiesBusiness ContinuityInternal AuditsExternal AuditsSecurity Controls

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Oversee remediation of information security findings identified during third-party assessments
Lead and guide remediation assessors throughout the remediation lifecycle
Review evidence and validate the effectiveness of security controls
Determine whether identified risks have been appropriately addressed and drive findings to closure
Coordinate among third parties, business stakeholders, and internal partners
Provide transparent reporting on remediation progress
Manage escalations and inform leadership of significant risks, issues, and remediation outcomes
Manage relationships with third parties, vendor managers, and internal stakeholders
Plan, execute, and document remediation activities according to established processes and procedures
Partner with third parties to address questions and support remediation of information security findings
Evaluate third-party information security risk through remediation reviews and activities
Identify and communicate gaps in third-party information security programs
Escalate remediation risks, issues, and security concerns to leadership
Support resource workload and planning for effective execution of remediation activities
Work independently with minimal oversight
Collaborate with global and virtual teams
Lead teams toward defined objectives and hold resources accountable for results

Requirements

What you’ll need

Education: B.E. / B Tech / M.E. / M Tech / MCA / M.Sc.
8+ years of experience
Experience in Information Security Management
Experience in Governance, Risk & Compliance
Experience in internal or external audits
Experience implementing or reviewing ISO 27001, PCI, SOX, etc. controls
Strong analytical and problem-solving skills
Excellent written/verbal communication skills
Risk Assessment & Remediation
Process Improvement & Execution
Global Collaboration
Independent Leadership
Leadership & Stakeholder Management
Certifications, if any: ISO 27001 LA, CISA, CISM, CISSP
Knowledge of Vulnerability Assessments and Application Architecture
Knowledge of Cloud Security
Knowledge of business continuity
Experience supporting regulatory and compliance activities
Understanding of Networking, Systems Administration, Cryptography, and Access Management
Familiarity with threat-informed security assessments
Work timings: 1:30 pm to 10:30 pm

Benefits

Comp & perks

Affordable, competitive and flexible benefits
Support for physical, emotional, and financial wellness
Opportunities to learn, grow, and make an impact
Inclusive workplace with career development opportunities
In-office culture supporting collaboration, engagement, and career development
Appropriate flexibility based on role-specific responsibilities and business needs