Information Analyst jobs in United States, Colorado, Denver
Bank Of America Vulnerability Identification Quality Control Analyst United States, Colorado, Denver
Share
Job Description:
Analyzes, improves, implements, and executes security controls proactively to prevent external threat actors from infiltrating company information or systems. Typically has 3-5+ years of relevant experience and will act as an individual contributor.
This position will be a member of the GIS Vulnerability Identification Assurance (VIA) Vulnerability Identification QC (Quality Control) team. In this role, you will help implement, manage, and monitor the effectiveness of infrastructure vulnerability identification efforts to protect the confidentiality, integrity, and availability of the line of businesses’ (LOB) information assets, primarily developing and implementing enhanced QC routines for remediation validation.
This role is responsible for establishing processes and controls to monitor CVE based vulnerabilities and associated risk on technology where we do not have GIS tools for automated scanning. They will work with stakeholders, Product Owners and Software Engineers to aid in the implementation of data requirements, analyze QC performance, conduct QC related research and troubleshoot any issues.
Analyze findings from vulnerability reporting workstreams, to perform targeted QC on the vulnerabilities being reported and QC around scope of inventory being assessed.
Review current existing vulnerability detection processes for ways to streamline and make them more efficient.
Respond to relevant requests received from stakeholders, or representatives of stakeholders, for investigation of potential technology-based identification reporting issues.
Performs other related duties incidental to the work described herein and all special assignments as needed or assigned.
Lead effective and sustainable activities associated with required VAI QC’s technology-based identification P2 closures evaluations.
Scope: where scanning signatures do not exist or findings are derived from vendor appliances where authenticated scanning cannot occur.
Support the expansion of a technology-based identification activity for GIS
Support the expansion of QC to cover workstation and ATM vulnerabilities, which are fed from non-GIS teams today.
Experience with CVE vulnerability analytics as a focus area within Information Security
Strong experience with CVE based vulnerability identification and risk analysis
Experience explaining analytics in plain English and ability with communicating associated risk
Ability to see the larger picture across the teams in the organization to build consensus and drive results
Demonstrated ability to self-direct, with minimal supervision to achieve assigned goals
Identify and develop proposals for program improvement
Independent and able to work in an ever changing, fast paced environment
Required Skills:
3-5+ years of experience in information security and/or data management roles
3-5+ years of experience with vulnerability management and/or assessment
Ability to creatively approach difficult problems to provide a viable solution for risk visibility and risk reduction in the enterprise
3-5+ years of experience with vulnerability management and/or assessment
Good communication skills, and the ability to understand and translate cyber security threats from a technical perspective to business-line understanding and execution; ability to communicate risks and propose counter measures to senior technology executives
Ability to review and analyze QC data to determine overall risk
Ability to work independently on initiatives with little oversight; Motivated and willing to learn
Broad technical background utilizing security technologies, such as Server and Workstation Operating Systems, Network Security, Vulnerability Scanning Engines, and Compliance Management solutions
Strong PC skills including Microsoft Office applications.
Desired Qualifications:
Strong analytical skills/problem solving/conceptual thinking
Ability to effectively communicate with Technical and Non-Technical business owners
Assist with internal efficiencies projects and development
These jobs might be a good fit
Amazon COMSEC Officer Information Security US Amazon Dedicated Clou... United States, Colorado, Denver
Share
Application deadline: Dec 30, 2025At AWS, we are hiring a Communications Security (COMSEC) Custodian/Officer to help manage and continue to develop the COMSEC Program. This will entail managing/dealing with multiple mission partners and COMSEC accounts found around the United States. It will also require continuous engagement with mission partners and vendors as we continue to scale the program to meet customer needs and requirements.This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph.Key job responsibilities
- Establish and maintain all COMSEC accounts regionally, to include on-site troubleshooting, network deployment, regular keying and inventorying of devices, and administrative tasks associated with account compliance.- Appoint and train partner teams to support ad-hoc requirements.- Update AWS policy doctrine to ensure compliance with overarching customer requirements.- Vigorously audit individuals accounts.
- Reviewing proposed new programs requiring COMSEC to ensure the security of the program.
- Serve as a COMSEC subject matter experts on Government inter-agency working groups, committees, and task forces.- Provide support and oversight over multiple COMSEC accounts and subaccounts across multiple sites.
- Develop and update operating procedures based on site, equipment and mission partners.
- Develop and update Emergency Action Plans (EAP) based on site, equipment and mission partners.
- Conduct semi-annual COMSEC training and EAP training per site for all AWS custodians.
- Perform all necessary backups, system upgrades, reconciliations, and inventories of COMSEC material.
- Support the semi-annual COMSEC training of all COMSEC custodians.
- Support the semi-annual EAP training of all COMSEC custodians.
- Maintain all COMSEC account and subaccount file plans as instructed per mission partner.
- Use and maintain common fill devices (KIK, SKL, SDS).
- Prepare and ship COMSEC material as instructed by mission partner policies as needed
- 5+ years of project management disciplines including scope, schedule, budget, quality, along with risk and critical path management experience
- 2+ years COMSEC experience as a Primary or Alternate COMSEC Custodian.
- Experience with various Type 1 Cryptographic devices, keys and loaders
- Current, active US Government Security Clearance of TS/SCI with Polygraph
Preferred Qualifications
- Experience communicating across technical and non-technical audiences, including executive level stakeholders or clients
- Experience with AWS products and services
- Experience developing and interpreting policies, procedures, and strategies governing the planning and delivery and execution of COMSEC programs.
- Experience in making recommendations for resolving COMSEC problems and requirements for multiple mission partners that utilize Type-1 encryptors to secure their networks.
- Experience providing technical advice, guidance, and recommendations to high level management officials and technical staff on critical COMSEC security issues.
- Experience in developing SOPs for all types of COMSEC actions. (E.g. Annual Rekey, Encryptor Upgrades, STE Use)
These jobs might be a good fit
Bank Of America Data Loss Prevention Analyst United States, Colorado, Denver
Share
Candidate must be willing to enroll in Associate Investment Monitoring due to the nature of the role and access.
What You’ll Do
- Analyze and Respond: Complete daily, continuous analysis of Endpoint Data Loss Prevent events (and others) with accurate results within the defined business SLA.
- Team Up for Impact: Collaborate with cyber security teams to drive both immediate and long-term global information security goals.
- Quality First: Participate in and contribute to the peer review process to maintain consistently high QA results.
- Close the Gaps: Identify and escalate potential policy gaps and enhancements to adapt to evolving risk landscapes.
- Share & Learn: Engage actively in team discussions and knowledge sharing to elevate group expertise.
- See the Bigger Picture: Use event metrics, escalation data, and trend analysis to proactively recommend, design, and implement improvements that reduce risk.
Why You’ll Love Working Here
- Global Impact: Your work will protect systems and data across multiple countries and industries.
- Collaborative Culture: Work alongside smart, driven peers who genuinely value teamwork.
- Hook Interest: Work within a technically complex, fast changing, and dynamic environment.
- Room to Grow: Opportunities to deepen expertise and influence global policies on a team that actively supports advancement.
- Flexibility: Hybrid friendly with opportunities for global collaboration.
Required Qualifications
- Experience: 3+ years of experience in information security or a related technology field.
- Breadth of Knowledge: Strong understanding of different security domains and industry leading DLP technologies.
- Threat Savvy: Experience spotting threats, vulnerabilities, and exploitation methods.
- Tech Literacy: Solid grasp of networking, system security, vulnerabilities, exploits, and common attack vectors.
- Problem-Solving Mindset: Intellectual curiosity, critical thinking, and a drive for proactive solutions.
- Communication Skills: Strong written and verbal skills; able to present technical topics to audiences of all levels.
- Self-Starter Energy: Comfortable navigating a geographically diverse, complex global corporation while collaborating effectively.
Desired Qualifications
- Certifications –Security+, Network+, CEH, CISSP, CySA+, CISA, CCNA, CCNP
- Familiarity with McAfee ePolicy Orchestrator (ePO) – Incident Manager
- Familiarity with Confluence / SharePoint
- Experience with Splunk
- Familiarity with JIRA
- Cloud security understanding with knowledge of CASB and DRM solutions
Skills:
- Cyber Security
- Data Privacy and Protection
- Problem Solving
- Process Management
- Threat Analysis
- Business Acumen
- Data and Trend Analysis
- Interpret Relevant Laws, Rules, and Regulations
- Risk Analytics
- Stakeholder Management
- Access and Identity Management
- Data Governance
- Encryption
- Information Systems Management
- Technology System Assessment
This job will be open and accepting applications for a minimum of seven days from the date it was posted.
1st shift (United States of America)These jobs might be a good fit
EY Analyst-S T-Transaction Diligence-Transaction Support-Sr United States, Colorado, Denver
Share
Full time employment, Monday – Friday, 40 hours per week, 8:30 am – 5:30 pm.
MINIMUM REQUIREMENTS:
Must have a Bachelor's degree in Accounting, Business, Finance or related field plus 7 years of related work experience (of which 5 years must be progressive, post-baccalaureate related work experience). Alternatively, will accept a Master’s degree in Accounting, Business, Finance or related field plus 5 years of related work experience.Must have 4 years of combined experience conducting audits, or other financial or tax due diligence of companies.Must have 5 years of combined experience conducting external audits, or other financial or tax due diligence experience with a public accounting or professional services firm.Must have 4 years of combined experience supervising the planning, execution, reporting on audits, other due diligence of financial statements or tax due diligence prepared in accordance with U.S. GAAS and U.S. GAAP and/or another foreign equivalent accepted accounting standard, such as IFRS.Must have 4 years of combined experience supervising audit, or other financial or tax due diligence teams consisting of two or more staff members.Requires domestic travel up to 50% in order to serve client needs.Employer will accept any suitable combination of education, training, or experience.
What we offer
We offer a comprehensive compensation and benefits package where you’ll be rewarded based on yourperformance and recognized for the value you bring to the business. The base salary for this job is $229,216.00 per year. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year. Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
•: You’ll develop the mindset and skills to navigate whatever comes next.
•: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way.
•: We’ll give you the insights, coaching and confidence to be the leader the world needs.
•: You’ll be embraced for who you are and empowered to use your voice to help others find theirs.EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
This particular position at Ernst & Young in the United States requires the qualified candidate to be a "United States worker" as defined by the U.S. Department of Labor regulations at 20 CFR 656.3. You can review this definition at at the bottom of page 750. Please feel free to apply to other positions that do not require you to be a "U.S. worker".
These jobs might be a good fit
Bank Of America Reporting Analyst - Global Information Security United States, Colorado, Denver
Share
Job Description:
Seeking a detail-oriented and proactive team member to help transform business data into clear, actionable insights. This role is responsible for supporting the creation, improvement, and automation of recurring reports, helping leaders make data-driven decisions. Generally requires 5 years of experience.
Key Responsibilities:
• Maintain and enhance recurring business reports to ensure stakeholders receive accurate and timely insights.
• Streamline and automate reporting processes to improve efficiency and reduce manual effort.
• Collaborate with team members and business partners to understand reporting needs and develop solutions that provide clarity and value.
• Support data organization and visualization efforts to help teams easily access and interpret information.
• Identify opportunities to improve reporting processes and deliver actionable recommendations.
REQUIRED QUALIFICATIONS
•
Experience in Alteryx, Tableau and SharePoint
• Strong attention to detail and organizational skills.
• Ability to work independently while collaborating with multiple stakeholders.
• Comfortable learning and working with tools that help organize, visualize, and automate data (experience with reporting or dashboards is a plus).
• Problem-solving mindset and eagerness to improve processes.
Your work will directly support business decisions by providing timely, clear, and accurate reporting. By improving and automating existing processes, you will help the team work more efficiently and focus on driving results.
These jobs might be a good fit
Bank Of America Global Information Security Regulatory Management Specialist United States, Colorado, Denver
Share
Job Description:
GIS Policy Regulatory Management Specialist represents Global Information Security (GIS) while working with Compliance, Risk, Legal, FLU's and Enterprise functions, consulting on all regulations with Global Information Security applicability. Expected to read published laws rules regulations and guidance’s (LRRGs), understand how they apply to GIS and map them to GIS policy. Maintain the inventory of LRRGs and mappings in the system of record and update the mappings as needed when policy language changes. Must be able to assess regulatory requirements against GIS policy, controls and assessment proof points. Drive action plans to address any regulatory gaps and ensure accurate risk and compliance reporting. Will work closely with subject matter experts including GIS Policy, Risk, Audit, Lines of Business, Legal, Compliance and external regulators as needed.Additional expectations of role:
• Ensure Laws, Rules, Regulations and Guides (LRRGs) in the GIS inventory are mapped to GIS policies and identified gaps are addressed to ensure policy coverage of regulatory requirements, industry standards and best practices.
• Breakdown and map assigned Laws, Rules, Regulations and Guides (LRRGs) to GIS policy requirements
• Raise any identified policy language gaps to be validated and remediated
• Perform Impact Assessments for any GIS policy changes (standards and baselines) to ensure coverage is maintained to aligned LRRGs
• Perform Impact Assessments for GIS Policy Exception Types to ensure a policy violation is not created based on aligned LRRGs
• Maintain accurate data for all LRRGs and GIS policy mappings in the system of records through BAU and QA routines
• Publish routine reports for Regulatory Landscape, metrics, newsletters, etc
• Maintain process documentation and playbooks
• Analytical mindset and teamwork to support and improve the GIS Policy Governance ecosystem.
• Technical and business knowledge to ensure policy language gaps are covered by policy and have aligned controls.
• Result-oriented, business focused, and successful individual to interface across multiple organizational units, at various levels.
• Knowledge/experience/exposure with information security topics, including the design, development, testing, implementation or governance of information security practices and solutions
• Knowledge of access management/risk identification and mitigation/project management skills.
Minimum Years of Experience
5
Required Qualifications:
• Previous experience in Information Technology / Information Security
• Ability to identify, analyze and address problems to resolve issues whenever possible in a way that minimizes negative impact and risk to the organization
• Strong critical thinking/analytical skills/problem solving/conceptual thinking
• Highly effective written and verbal communication skills.
• Microsoft Office Proficient (Excel, Word, Outlook, Visio, PowerPoint, etc.)
• Ability to communicate complex information in simple terms (oral and written)
• Strong organization skills with the ability to prioritize requests and workload accordingly
• Strong analysis and fact-based decision-making
• Strong leadership skills and qualities which enable you to work with peers and various levels of management
• Proven ability of risk oriented approach and Strong risk management acumen.
• Influence horizontally and vertically across the organization and diverse audiences with varying degrees of technical understanding
• Ability to work independently on initiatives with little oversight.
• Motivated and willing to learn.
• Quick learner and self-starter
Desired Qualifications
• 5 years of experience operating within an information security environment.
• Bachelor's degree in Information Technology or related field
• Prior Governance, Compliance, and or Audit experience desired.
• Broad awareness of information security operations and/or enterprise information technology (Enterprise data management, application development, network management).
• Familiarity with independent audit, assessment, QA/QC functions desired.
• Leadership competency in geographically diverse matrixed environment.
• Must be comfortable communicating technology impacts and risk to various levels of executive management understanding the need to tailor and deliver appropriate content for given audience.
• Ability to work with Technical and Non Technical business owners
• Experience with Project Management or working with Project Managers
Skills:
- Customer and Client Focus
- Interpret Relevant Laws, Rules, and Regulations
- Policies, Procedures, and Guidelines
- Problem Solving
- Quality Assurance
- Business Acumen
- Controls Management
- Innovative Thinking
- Process Management
- Stakeholder Management
- Business Process Analysis
- Data Governance
- Data Privacy and Protection
- Data and Trend Analysis
- Risk Analytics
This job will be open and accepting applications for a minimum of seven days from the date it was posted.
1st shift (United States of America)These jobs might be a good fit
Bank Of America Financial Portfolio Lead - Information Security United States, Colorado, Denver
Share
Job Description:
Job Description:
Responsibilities:
• Contribute to Cybersecurity initiative portfolio oversight by leading financial routines and maintaining a consolidated view of financial performance
• Develop financial reporting and dashboards for leadership
• Partner with Finance team to plan and manage forecast accuracy
• Work with Program and Project Managers to track and report on financial health of multiple on-going projects
Required Skills:
· 3 to 5 years financial institution experience
· Previous experience with Bank of America tools – PMMT, PPRT and TPAS.
· Proficiency with MS Office, including master Excel skills
· Strong leadership in a matrixed environment
· Strong financial management skills
· Experience with multiple project management methodologies
· Strong communication skills
· Proven ability to prioritize work and meet deadlines
· Analytical mindset and proactive approach to problem identification and solving
· Excellent attention to detail and organizational skills
Desired:
· Understanding of Information Security project portfolios
· Certificate(s) in Cybersecurity
· Bachelor’s Degree in Finance, Accounting, Business or equivalent work experience
These jobs might be a good fit
Share
Job Description:
Analyzes, improves, implements, and executes security controls proactively to prevent external threat actors from infiltrating company information or systems. Typically has 3-5+ years of relevant experience and will act as an individual contributor.
This position will be a member of the GIS Vulnerability Identification Assurance (VIA) Vulnerability Identification QC (Quality Control) team. In this role, you will help implement, manage, and monitor the effectiveness of infrastructure vulnerability identification efforts to protect the confidentiality, integrity, and availability of the line of businesses’ (LOB) information assets, primarily developing and implementing enhanced QC routines for remediation validation.
This role is responsible for establishing processes and controls to monitor CVE based vulnerabilities and associated risk on technology where we do not have GIS tools for automated scanning. They will work with stakeholders, Product Owners and Software Engineers to aid in the implementation of data requirements, analyze QC performance, conduct QC related research and troubleshoot any issues.
Analyze findings from vulnerability reporting workstreams, to perform targeted QC on the vulnerabilities being reported and QC around scope of inventory being assessed.
Review current existing vulnerability detection processes for ways to streamline and make them more efficient.
Respond to relevant requests received from stakeholders, or representatives of stakeholders, for investigation of potential technology-based identification reporting issues.
Performs other related duties incidental to the work described herein and all special assignments as needed or assigned.
Lead effective and sustainable activities associated with required VAI QC’s technology-based identification P2 closures evaluations.
Scope: where scanning signatures do not exist or findings are derived from vendor appliances where authenticated scanning cannot occur.
Support the expansion of a technology-based identification activity for GIS
Support the expansion of QC to cover workstation and ATM vulnerabilities, which are fed from non-GIS teams today.
Experience with CVE vulnerability analytics as a focus area within Information Security
Strong experience with CVE based vulnerability identification and risk analysis
Experience explaining analytics in plain English and ability with communicating associated risk
Ability to see the larger picture across the teams in the organization to build consensus and drive results
Demonstrated ability to self-direct, with minimal supervision to achieve assigned goals
Identify and develop proposals for program improvement
Independent and able to work in an ever changing, fast paced environment
Required Skills:
3-5+ years of experience in information security and/or data management roles
3-5+ years of experience with vulnerability management and/or assessment
Ability to creatively approach difficult problems to provide a viable solution for risk visibility and risk reduction in the enterprise
3-5+ years of experience with vulnerability management and/or assessment
Good communication skills, and the ability to understand and translate cyber security threats from a technical perspective to business-line understanding and execution; ability to communicate risks and propose counter measures to senior technology executives
Ability to review and analyze QC data to determine overall risk
Ability to work independently on initiatives with little oversight; Motivated and willing to learn
Broad technical background utilizing security technologies, such as Server and Workstation Operating Systems, Network Security, Vulnerability Scanning Engines, and Compliance Management solutions
Strong PC skills including Microsoft Office applications.
Desired Qualifications:
Strong analytical skills/problem solving/conceptual thinking
Ability to effectively communicate with Technical and Non-Technical business owners
Assist with internal efficiencies projects and development
These jobs might be a good fit
