Vacancy description

Info Security Consultant II A in Bombay, भारत

Bank of America Corporation

  • On-siteWork from the office

Bombay, भारत

Job Description

About Us

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.
Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.
We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.
Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Global Business Services

Global Business Services delivers Technology and Operations capabilities to Lines of Business and Staff Support Functions of Bank of America through a centrally managed, globally integrated delivery model and globally resilient operations. Global Business Services is recognized for flawless execution, sound risk management, operational resiliency, operational excellence and innovation. In India, we are present in five locations and operate as BA Continuum India Private Limited (BACI), a non-banking subsidiary of Bank of America Corporation and the operating company for India operations of Global Business Services.

Process Overview

The Global Information Security (GIS) is responsible for protecting Bank information systems, confidential and proprietary data, and customer information. The team develops the Bank’s Information Security strategy and policy, manages the Information Security program and identifies and addresses vulnerabilities, Develops, deploys and manages a risk-based controls portfolio, Manages and operates global security operations center that monitor, detects and responds to cybersecurity incidents.

GIS Identity & Access management (IAM) Access Control Team goal is to ensure that the control processes and effectiveness are within the identified risk tolerance.  Manage the performance and effectiveness of the working control through the establishment of metrics with thresholds. Validate the reasonability of Laws, Rules and Regulations mapping alignment to the controls, as aligned by the GIS Policy team.

Job Description

The Cloud Security Consultant will be a key member of the Global Information Security (GIS) organization within the Business Information Security Officer (BISO) Cloud Security function, responsible for supporting and governing security controls across multi-cloud environments including AWS, Azure, and Google Cloud Platform (GCP). This role provides risk-based security consulting, review, and advisory services across cloud onboarding, architecture, and operations. The consultant will partner closely with cloud and risk teams to ensure security controls are effectively implemented, assessed, and aligned with enterprise policies and regulatory requirements.

Responsibilities

  • Support Cloud Governance & Approval (CGA) and Security Process Integration (SPI) activities, ensuring alignment to defined metrics, reporting requirements, and operational standards.

  • Document and maintain cloud security processes, procedures, guidebooks, and playbooks to support consistent governance and operational execution.

  • Identify opportunities to automate existing manual processes, improving efficiency, scalability, and accuracy of cloud security operations.

  • Perform risk reviews of cloud environments, including gathering and validating evidence to support informed decisions to approve or deny CGA requests.

  • Conduct quality assurance (QA) reviews for Azure and AWS CGA cases to ensure alignment with approved services, workloads, and environmental security standards.

  • Support high-volume governance operations, managing over 2,000+ Azure and AWS policy evaluations monthly, ensuring adherence to expanding cloud controls and SPI performance metrics.

  • Maintain and enhance cloud control libraries for AWS and Azure by capturing new controls and documenting updates or changes to existing policies.

  • Execute and support SPI processes, including tracking, measuring, and reporting on key security metrics and governance outcomes.

Requirements

Education - B.E/ https://jobeax.com/link/2DENLGgQM7whDhaE

Certifications If Any – Python, Azure

Experience Range - 6+ years

Foundational Skills:

  • Cloud Automation using Python

  • Working knowledge of AWS and Azure, with exposure or willingness to develop expertise in GCP

  • Experience in information security, cloud security, or risk consulting

  • Experience performing security risk assessments, control validation, and governance reviews

  • Familiarity with Cloud security frameworks (NIST, CIS, ISO) and Cloud-native controls and architectures

  • Strong analytical skills with ability to collect and evaluate data at a micro-level for risk decisions

  • Experience with Jira/Kanban workflows and Excel-based reporting and data tracking

Desired Skills:

  • Python Programing and Tools.

  • Experience supporting CGA, governance, or security approval workflows

  • Exposure to cloud security tools (e.g., AWS Security Hub, Azure Defender, GCP SCC)

  • Relevant certifications (e.g., AWS, Azure, GCP, CISSP, CCSP)

Work Timings - 11:30AM - 8:30PM (IST)

Job Location - Mumbai/Chennai

Similar vacancies

More like this role

Bank of America Corporation

Info Security Consultant II A

  • On-site
... Services. Process Overview* Global Information Security (GIS) is responsible for protecting Bank information systems, confidential and proprietary data, and customer information. The team develops the Bank’s Information Security strategy and policy, manages the Information Security program and identifies and addresses vulnerabilities, ...

Bombay, भारत

Bank of America Corporation

Info Security Consultant II B

  • On-site
... of Global Business Services. Process Overview The BISO is responsible for protecting Bank information systems, confidential and proprietary data, and customer information. The team develops the Bank’s Information Security strategy and policy, manages the Information Security program. Job Description The QA team will be performing ...

Hyderabad, भारत

Bank of America Corporation

Info Security Controls Specialist I B

  • On-site
... build a successful career with opportunities to learn, grow, and make an impact. Join us! This job is responsible for developing and supporting enterprise-wide information security policies, procedures, and standards. Key responsibilities include applying knowledge of laws, rules and information security concepts (e.g., NIST, ...

Bombay, भारत

  • Full-time
... perspectives they need to conquer whatever tomorrow throws their way. Great Place to Work® Certified™ About the Job: Security Analyst II is responsible for providing security solutions to clients. The Security Analyst II will demonstrate the capacity to consistently meet and exceed client expectations representing and reinforcing ...

Bangalore, भारत

  • Cybersecurity
... and perspective gives us a competitive advantage. Location - BANGALORE Role Description Required Qualifications - Seven or more years of relevant experience in information security, cloud security, security architecture, security engineering, technology risk, control assessment, or security standards development. • Demonstrated ...

Bangalore, भारत

Federal Express Corporation AMEA

Cyber Security Analyst II

  • Full-time
  • Cybersecurity
  • AI / ML
Under general guidance, the AI Engineer will be responsible for collaborating with the Information Security organization to analyse current-state business processes and develop automated workflows. This role involves building scalable automation using RPA platforms, Agentic AI workflows, and advanced ChatBot technologies ...

Hyderabad, भारत

  • Remote
  • Hybrid
  • Full-time
  • Contract
... importance of work-life balance and offer a 'Total Reward' package to help you thrive both in and out of the office. If you identify as having a disability, please inform us before your interview, and we will discuss any necessary adjustments. Additional Information: We are an equal opportunity employer committed to fostering ...

Noida, भारत

  • Remote
  • Hybrid
  • Full-time
Job Description Overview We are seeking an experienced Environment Consultant specialising in stakeholder engagement and consultation to support the GTC Planning, Environmental Consenting and Communities (PECC) discipline for high-profile infrastructure projects across the UK. You will work closely with clients, multidisciplinary ...

Bombay, भारत

Federal Express Corporation AMEA

Cyber Security Analyst-Senior II

  • Full-time
  • Cybersecurity
The Cyber Security Analyst – Senior II is a regional role within FedEx InfoSec, responsible for driving cybersecurity, risk, and compliance initiatives across the AMEA region. This role acts as a trusted advisor to business stakeholders, ensuring alignment with global security standards while enabling regulatory compliance ...

Hyderabad, भारत

  • Hybrid
  • On-site
  • Full-time
  • IT
As a Senior Software Engineer II, you will focus on designing and developing our next generation of Software Supply Chain Security capabilities. This role will help establish secure-by-default frameworks, libraries, and automation that improve how product teams generate SBOMs, capture software supply chain provenance, sign ...

Bangalore, भारत

AKAMAI TECHNOLOGIES INDIA PRIVATE LIMITED

Akamai Technologies - Security Compliance Specialist II

  • Auditing
Role & responsibilities : As a Compliance Specialist II within Security Compliance, you will be a key contributor to Akamai's security compliance posture by leading hands-on control testing, risk identification, and audit https://jobeax.com/link/bsL2CWVbmgfUNAC6 responsibilities include : - Controls Testing & Assessment ...

Bangalore, भारत