Third Party Cyber Security Assessor

Bank of America

Third Party Cyber Security Assessor at Bank of America. Responsible for performing information security reviews and managing third-party relationships related to security assessments.

Posted 7/31/2026full-timeDenver • Colorado, District of Columbia, Illinois • 🇺🇸 United StatesMid-LevelSenior💰 $95,000 - $143,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information Security and IT Audit, with a strong focus on evaluating third-party security risks and managing vendor relationships. Proficient in technical writing and communication, with a solid understanding of compliance standards and security controls.

Highest-signal resume keywords

Information SecurityIT AuditSecurity ControlsSOX ComplianceNIST Standards

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityIT AuditSecurity ControlsSOX ComplianceChange ManagementEnterprise Risk ManagementTechnical WritingVerbal CommunicationRisk EvaluationDocumentation

Soft Skills

Relationship ManagementCollaborationCommunication

Tools & Technologies

NISTPCIISOSDLCCOBITITIL

Certifications & Qualifications

ISO27002CISSPCEHCISMCISA

Tech Stack

Tools & technologies

SDLC

About the role

Key responsibilities & impact

Performing information security reviews of third parties providing services to the bank
Collecting and reviewing documentation, including playbooks and evidence during assessment
Documenting controls in assessment workpapers
Evaluating third parties' information security risk
Discussing information security gaps with third parties
Managing relationships with third parties and Enterprise Vendor Managers
Ability to travel up to 10-15%

Requirements

What you’ll need

3 Years experience in Information Security and/or IT Audit
Technical writing and verbal communication skills
Ability to effectively work with partners at varying knowledge and organization levels
Technical skills in Security Controls, IT Compliance, SOX Compliance, Change Management, Enterprise Risk Management
Solid grasp of NIST, PCI, ISO, SDLC, COBIT, and ITIL standards
Desired: Information Security certifications including ISO27002 / CISSP / CEH / CISM / CISA

Benefits

Comp & perks

Industry-leading benefits
Access to paid time off
Resources and support for employees
Discretionary incentive eligible
Annual discretionary award based on performance