> Markdown version of [/jobs/ext/4553085-information-security-executive](https://www.wearedevelopers.com/jobs/ext/4553085-information-security-executive). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Executive - **Company:** Bank of America Corporation - **Location:** London, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Security Management, Cyber Threat Analysis, Cybercrime - **Published:** November 4, 2026 - **Apply:** https://ghr.wd1.myworkdayjobs.com/lateral-emea/job/Chester/Information-Security-Executive_26039387-1 ## About the Role * A senior leader with extensive experience in information security, cyber risk management, technology risk, operational risk or a related field. * Significant experience operating at a senior level within highly regulated financial services environments. * Deep understanding of information security governance, regulatory frameworks and cyber risk management practices. * A proven track record of engaging with and influencing regulators, board members and senior executives. * Proven leadership of geographically distributed teams, with the ability to set direction and drive accountability at scale. * Strong command of regional and global cybersecurity threats and associated control environments. * The ability to influence across complex, matrixed organisations and deliver outcomes through partnership and collaboration. * Exceptional communication, stakeholder management and board-level presentation skills. * Strong strategic thinking, sound judgement and decisive problem-solving capabilities. Skills that will help: * CISSP, CISM or equivalent industry certifications. * Experience supporting multinational financial institutions. * Knowledge of European regulatory frameworks, including DORA, NIS2, ECB expectations and country-specific requirements. * Experience managing regulatory examinations and remediation programmes. * Expertise in enterprise risk management, regulatory relations and information security governance. * Strong executive presence and credibility at board level. * Expertise in cyber resilience and operational resilience. ## Description Our London office is based just a stone's throw from the magnificent St. Paul's Cathedral on bustling King Edward Street. Here you'll find modern workspaces and a state-of-the-art auditorium space. In addition, we're proud to host an onsite restaurant that shares our commitment to sustainability by providing delicious seasonal menus which have been created with the planet in mind. Make sure to take time for yourself and head up to our rooftop terrace and take in the spectacular views across London. Finally, your physical wellness is well-catered for with our onsite gym facilities and medical centre., This is a rare opportunity to shape the information security agenda for Bank of America across Europe, the Middle East and Africa. As the newly created EMEA Regional Information Security Officer (RISO), you will serve as the senior Global Information Security (GIS) leader for the region, setting strategic direction, leading regulatory engagement and owning oversight of information security risk across a diverse, complex and highly regulated footprint. Reporting to the International Information Security Executive, you will lead the EMEA team of Country Information Security Officers and act as a trusted partner to business executives and senior leaders across Technology, Risk, Compliance, Audit and Legal, ensuring cyber and information security risks are clearly understood, robustly governed and decisively addressed. This is a highly visible, enterprise-critical role. You will shape regional regulatory engagement, advise country management teams and legal entity boards, and represent GIS with regulators and external stakeholders. Above all, you will translate global security strategy into regional action, ensuring the organisation stays ahead of evolving threats, regulatory expectations and business priorities. Responsibilities: Regional Leadership and Strategy * Own the execution of GIS strategy, priorities and operating plans across EMEA, with full accountability for regional outcomes. * Provide visible leadership and clear direction to Country Information Security Officers across the region. * Translate global information security objectives into regionally effective programmes and operating routines. * Act as the senior voice of GIS within regional leadership forums and governance structures. Regulatory Engagement and Country Oversight * Lead and oversee regulatory engagement across EMEA on information security matters. * Ensure the region is fully prepared for regulatory reviews, examinations and information requests. * Anticipate regional regulatory developments and emerging supervisory expectations, positioning the bank ahead of change. * Guide and support Country ISOs in their engagement with local regulators and legal entity management teams. * Set the standard for consistent regulatory responses, governance practices and risk reporting across jurisdictions. * Escalate significant regulatory concerns and thematic issues to the International RISO and GIS leadership, with clear recommendations. Information Security Risk Management * Own oversight of regional information security risk management across EMEA. * Ensure key cyber risks, vulnerabilities and control weaknesses are identified, tracked and remediated with appropriate urgency. * Partner with Technology, Business, Risk and Compliance leaders to drive meaningful risk reduction and remediation. * Maintain a clear line of sight on material regional cyber threats and emerging risks. * Provide senior oversight and steady leadership during significant cybersecurity incidents affecting EMEA entities or operations. Country Information Security Management * Lead and coordinate the network of Country Information Security Officers across EMEA. * Provide governance, direction and constructive challenge to country information security activities. * Ensure Country ISOs have the capability, guidance and support needed to meet local regulatory obligations. * Promote consistent, high-quality execution of information security oversight across countries and legal entities. * Align country-level information security priorities with broader GIS objectives. Stakeholder Management and Influence * Build trusted relationships with regional executives, legal entity boards and control partners. * Serve as the senior information security adviser to regional management teams, influencing decisions at the highest level. * Partner with Enterprise Risk, Compliance, Audit and Legal leadership to address regulatory and risk management priorities. * Contribute to the bank's engagement with industry, government and public-private sector partnerships focused on cyber resilience and information security.