Information Security Executive

Job Description:
Job Title: EMEA Regional Information Security Executive
Corporate Title:  Up to Senior Vice President
Location:  London or Chester

Company Overview:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.

Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Location Overview:

London

Our London office is based just a stone’s throw from the magnificent St. Paul’s Cathedral on bustling King Edward Street. Here you’ll find modern workspaces and a state-of-the-art auditorium space. In addition, we’re proud to host an onsite restaurant that shares our commitment to sustainability by providing delicious seasonal menus which have been created with the planet in mind. Make sure to take time for yourself and head up to our rooftop terrace and take in the spectacular views across London. Finally, your physical wellness is well-catered for with our onsite gym facilities and medical centre.

Chester

Find us in the city of Chester, a destination renowned for its culture, history, and beauty. Working at Bank of America Chester offers a far-reaching global career for a world-renowned organisation, whilst being ideally situated against the backdrop of the rolling North Wales hills and the banks of the serene River Dee.

Role Description:

This is a rare opportunity to shape the information security agenda for Bank of America across Europe, the Middle East and Africa. As the newly created EMEA Regional Information Security Officer (RISO), you will serve as the senior Global Information Security (GIS) leader for the region, setting strategic direction, leading regulatory engagement and owning oversight of information security risk across a diverse, complex and highly regulated footprint.

Reporting to the International Information Security Executive, you will lead the EMEA team of Country Information Security Officers and act as a trusted partner to business executives and senior leaders across Technology, Risk, Compliance, Audit and Legal, ensuring cyber and information security risks are clearly understood, robustly governed and decisively addressed.

This is a highly visible, enterprise-critical role. You will shape regional regulatory engagement, advise country management teams and legal entity boards, and represent GIS with regulators and external stakeholders. Above all, you will translate global security strategy into regional action, ensuring the organisation stays ahead of evolving threats, regulatory expectations and business priorities.

Responsibilities:

Regional Leadership and Strategy

• Own the execution of GIS strategy, priorities and operating plans across EMEA, with full accountability for regional outcomes.
• Provide visible leadership and clear direction to Country Information Security Officers across the region.
• Translate global information security objectives into regionally effective programmes and operating routines.
• Act as the senior voice of GIS within regional leadership forums and governance structures.

Regulatory Engagement and Country Oversight

• Lead and oversee regulatory engagement across EMEA on information security matters.
• Ensure the region is fully prepared for regulatory reviews, examinations and information requests.
• Anticipate regional regulatory developments and emerging supervisory expectations, positioning the bank ahead of change.
• Guide and support Country ISOs in their engagement with local regulators and legal entity management teams.
• Set the standard for consistent regulatory responses, governance practices and risk reporting across jurisdictions.
• Escalate significant regulatory concerns and thematic issues to the International RISO and GIS leadership, with clear recommendations.

Information Security Risk Management

• Own oversight of regional information security risk management across EMEA.
• Ensure key cyber risks, vulnerabilities and control weaknesses are identified, tracked and remediated with appropriate urgency.
• Partner with Technology, Business, Risk and Compliance leaders to drive meaningful risk reduction and remediation.
• Maintain a clear line of sight on material regional cyber threats and emerging risks.
• Provide senior oversight and steady leadership during significant cybersecurity incidents affecting EMEA entities or operations.

Country Information Security Management

• Lead and coordinate the network of Country Information Security Officers across EMEA.
• Provide governance, direction and constructive challenge to country information security activities.
• Ensure Country ISOs have the capability, guidance and support needed to meet local regulatory obligations.
• Promote consistent, high-quality execution of information security oversight across countries and legal entities.
• Align country-level information security priorities with broader GIS objectives.

Stakeholder Management and Influence

• Build trusted relationships with regional executives, legal entity boards and control partners.
• Serve as the senior information security adviser to regional management teams, influencing decisions at the highest level.
• Partner with Enterprise Risk, Compliance, Audit and Legal leadership to address regulatory and risk management priorities.
• Contribute to the bank's engagement with industry, government and public-private sector partnerships focused on cyber resilience and information security.

Leadership and People Development

• Lead, mentor and develop a geographically distributed team across multiple jurisdictions.
• Foster a culture of accountability, collaboration and continuous improvement.
• Build a diverse, high-performing team aligned with GIS leadership principles.
• Strengthen the GIS talent pipeline across EMEA, developing the next generation of security leaders.

What we are looking for:

• A senior leader with extensive experience in information security, cyber risk management, technology risk, operational risk or a related field.
• Significant experience operating at a senior level within highly regulated financial services environments.
• Deep understanding of information security governance, regulatory frameworks and cyber risk management practices.
• A proven track record of engaging with and influencing regulators, board members and senior executives.
• Proven leadership of geographically distributed teams, with the ability to set direction and drive accountability at scale.
• Strong command of regional and global cybersecurity threats and associated control environments.
• The ability to influence across complex, matrixed organisations and deliver outcomes through partnership and collaboration.
• Exceptional communication, stakeholder management and board-level presentation skills.
• Strong strategic thinking, sound judgement and decisive problem-solving capabilities.

Skills that will help:

• CISSP, CISM or equivalent industry certifications.
• Experience supporting multinational financial institutions.
• Knowledge of European regulatory frameworks, including DORA, NIS2, ECB expectations and country-specific requirements.
• Experience managing regulatory examinations and remediation programmes.
• Expertise in enterprise risk management, regulatory relations and information security governance.
• Strong executive presence and credibility at board level.
• Expertise in cyber resilience and operational resilience.

Managerial Responsibilities

The EMEA RISO will have direct management responsibility for Country Information Security Officers and will be accountable for:
• Building and sustaining a high-performing regional team.
• Driving consistency of execution across countries and jurisdictions.
• Managing regional resourcing and organisational priorities.
• Delivering strategic objectives aligned with International RISO priorities and GIS business outcomes.

Benefits of working at Bank of America:

UK

• At Bank of America, we strive to prioritise employees’ health and wellbeing – it’s what makes us a Great Place to Work.
• Private healthcare for you and your family plus an annual health screen to help you manage your physical wellness with the option to purchase a screen for your partner
• Competitive pension plan, life assurance and group income protection cover if you become unable to work as a result of a disability or health reasons
• We offer 26-weeks paid maternity leave, 16-weeks paid paternity leave and inclusive family leave arrangements for working parents and carers including 20 days of back-up childcare including access to school holiday clubs and 20 days of back-up adult care per annum
• The ability to change your core benefits as well as the option of selecting a variety of flexible benefits to suit your personal circumstances including access to a wellbeing account, travel insurance, critical illness, cycle to work etc.
• Use of a flex fund to use towards benefits
• Access to an emotional wellbeing helpline, and virtual GP services
• Access to the Peppy App which provides 1:1 support, consultations and resources relating to men’s health, women’s health, fertility, menopause and pregnancy & parenthood
• Access to a range of gyms, exercise classes and wellbeing Apps through Wellhub, including Headspace and Calm
• Ability to donate to charities of your choice directly through payroll and the bank will match your contribution
• Opportunity to give back to your community, develop new skills and work with new groups of people by volunteering in your local area

Bank of America:

Good conduct and sound judgment is crucial to our long term success. It’s important that all employees in the organisation understand the expected standards of conduct and how we manage conduct risk. Individual accountability and an ownership mind-set are the cornerstones of our Code of Conduct and are at the heart of managing risk well.

We are an equal opportunities employer and ensure that no applicant is subject to less favourable treatment on the grounds of sex, gender identity or gender reassignment, marital or civil partner status, race, religious or similar philosophical belief, political opinion, colour, nationality, ethnic or national origins, age, sexual orientation, pregnancy or maternity, socio-economic background, responsibility for dependants or physical or mental disability. The Bank selects candidates for interview based on their skills, qualifications and experience.

We strive to ensure that our recruitment processes are accessible for all candidates and encourage any candidates to tell us about any adjustment requirements.