Mainframe Information Security Engineer III

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities, and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We're devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow, and make an impact, along with the power to make a difference. Join us!

Global Information Security (GIS) is responsible for protecting bank information systems, confidential and proprietary data, and customer information. GIS develops the bank's Information Security strategy and policy, manages the Information Security program, identifies and addresses vulnerabilities, and operates a global security operations center that monitors, detects, and responds to cybersecurity incidents. The Mainframe Engineering Team defines, drives, and delivers major components of Bank of America's security engineering strategy, addressing the mission-critical need to ensure appropriate access to the resources across increasingly heterogeneous technology environments and to meet increasingly rigorous compliance requirements.

Key Responsibilities:

• Serves as a subject matter expert for one or more engineering initiatives for the mainframe Security environment.
• Designs, develops, and implements systems to contribute to the protection of system boundaries, harden computer systems and network devices against attacks, and secure sensitive data.
• Drives complex technical information security projects to ensure on-time delivery and identifies and raises risks and potential vulnerabilities at all stages of the security engineering process.
• Leverages broad knowledge of information security technologies, techniques, and processes and prepares to grow knowledge within one or more security-engineering domains.
• Leads the identification, definition, and documentation of system security requirements.
• Leads work efforts with a diverse set of stakeholders with varying priorities to debate and negotiate paths forward.
• Drives the development and execution of test plans to produce quantitative results and thinks outside the box to develop and implement multiple solutions to complex problems.

Required Qualifications:

• 15+ years experience using and supporting RACF in a medium to large mainframe environment.
• 15+ years experience using and supporting a broad range of mainframe security tools to reduce mainframe security risk.
• 5+ years experience using and supporting mainframe security tools including Vanguard RACF Administrator or competing product like zSecure.
• Knowledge of mainframe architecture, subsystems, tools to be able to analyze how best to configure security. For example, CICS, DB2, IMS, USS.
• Understand the overall mainframe security environment and be able to develop and present responses to inquiries by internal and external auditors, security professionals, and regulators.
• Demonstrated security solutions development and deployment in a complex mainframe environment.
• Ability to be on-call and work weekends when required by events (i.e. Disaster Recovery Tests, installation of new software version, critical incidents, etc.).
• Must have in-depth experience capturing requirements and documenting in visual formats, including flowcharts, process maps, flow diagrams, decision trees, mockups/wireframes, relationship diagrams, etc.
• Must have experience with management, adherence to risk frameworks, policies, standards, and controls.
• Must have excellent written/verbal communication skills and attention to detail.
• Must have excellent organizational skills and be able to effectively prioritize multiple tasks.
• Must have experience participating in large or complex projects.
• Must be pro-active and be able to drive direction of work that needs to be completed, with the ability to work independently on initiatives with little oversight.
• Ability to coordinate and facilitate routines to support delivery (i.e., kick-offs, status reviews, stakeholder meetings, change controls, tollgates).
• Ability to be comfortable delivering messages across a wide spectrum of individuals having varying degrees of technical understanding.
• Ability to create management-level reporting using aggregated data.
• Experience working in Agile methodology and a deep understanding of all phases of the SDLC.
• Strong analytical skills/problem solving/conceptual thinking.
• Collaboration and ability to influence across peer groups and various levels of management.

Desired Qualifications:

• 15+ years working in the financial industry.
• 10+ years working in a multi-Sysplex, multi-LPAR mainframe environment.
• 5+ years using and supporting a zVM security tool.
• Knowledge of VSAM, REXX, Easytrieve, Generation Data sets.
• Experience consolidating diverse multi-company mainframe environments to a common practice, tools, support framework.

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Shift: 1st shift (United States of America)

Hours Per Week: 40