Cyber Security Analyst – Third Party Governance and Planning

Bank of America

. Develop, maintain, and communicate third party information security requirements .

Posted 5/8/2026full-timeDenver • Colorado, District of Columbia, Illinois • 🇺🇸 United StatesMid-LevelSenior💰 $150,000 - $194,700 per yearWebsite

About the role

Key responsibilities & impact

Develop, maintain, and communicate third party information security requirements
Drive strategic initiatives focused on the design of Third Party Cyber Assurance (TPCA) program requirements
Interaction with technical subject matter experts, GIS Policy team, and third party management community
Review and adopt industry best practices to transform processes for third party information security requirements

Requirements

What you’ll need

At least 5 years of relevant experience
Previous information technology/security audit/assessment experience
Excellent verbal and written communication skills
Self-starting, organized, and requiring minimal management oversight
Ability to operate across organizational boundaries to accomplish tasks
Strong analytical skills/problem solving/conceptual thinking/attention to detail
Ability to work effectively with peers and various levels of management
Well organized and thorough, with the ability to balance and prioritize
Background in information security, data protection and risk management
Familiarly or experience with information security industry frameworks (e.g., NIST, CMMC, ISO 27001, PCI, etc.)
Deep understanding of risk management concepts
Cross functional project management and process development experience

Benefits

Comp & perks

Discretionary incentive eligible
Annual discretionary award based on performance
Industry-leading benefits
Access to paid time off
Resources and support for physical, emotional, and financial wellness

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

information securitydata protectionrisk managementsecurity auditsecurity assessmentNISTCMMCISO 27001PCIprocess development

Soft Skills

verbal communicationwritten communicationself-startingorganizational skillsanalytical skillsproblem solvingconceptual thinkingattention to detailcollaborationprioritization