Job Title
EMEA Regional Information Security Executive
Corporate Title: Up to Senior Vice President
Location: London or Chester
Role Description
This is a rare opportunity to shape the information security agenda for Bank of America across Europe, the Middle East and Africa. As the newly created EMEA Regional Information Security Officer (RISO), you will serve as the senior Global Information Security (GIS) leader for the region, setting strategic direction, leading regulatory engagement and owning oversight of information security risk across a diverse, complex and highly regulated footprint. Reporting to the International Information Security Executive, you will lead the EMEA team of Country Information Security Officers and act as a trusted partner to business executives and senior leaders across Technology, Risk, Compliance, Audit and Legal, ensuring cyber and information security risks are clearly understood, robustly governed and decisively addressed. This is a highly visible, enterprise-critical role. You will shape regional regulatory engagement, advise country management teams and legal entity boards, and represent GIS with regulators and external stakeholders. Above all, you will translate global security strategy into regional action, ensuring the organisation stays ahead of evolving threats, regulatory expectations and business priorities.
Responsibilities
Regional Leadership and Strategy
•Own the execution of GIS strategy, priorities and operating plans across EMEA, with full accountability for regional outcomes.
•Provide visible leadership and clear direction to Country Information Security Officers across the region.
•Translate global information security objectives into regionally effective programmes and operating routines.
•Act as the senior voice of GIS within regional leadership forums and governance structures.
Regulatory Engagement and Country Oversight
•Lead and oversee regulatory engagement across EMEA on information security matters.
•Ensure the region is fully prepared for regulatory reviews, examinations and information requests.
•Anticipate regional regulatory developments and emerging supervisory expectations, positioning the bank ahead of change.
•Guide and support Country ISOs in their engagement with local regulators and legal entity management teams.
•Set the standard for consistent regulatory responses, governance practices and risk reporting across jurisdictions.
•Escalate significant regulatory concerns and thematic issues to the International RISO and GIS leadership, with clear recommendations.
Information Security Risk Management
•Own oversight of regional information security risk management across EMEA.
•Ensure key cyber risks, vulnerabilities and control weaknesses are identified, tracked and remediated with appropriate urgency.
•Partner with Technology, Business, Risk and Compliance leaders to drive meaningful risk reduction and remediation.
•Maintain a clear line of sight on material regional cyber threats and emerging risks.
•Provide senior oversight and steady leadership during significant cybersecurity incidents affecting EMEA entities or operations.
Country Information Security Management
•Lead and coordinate the network of Country Information Security Officers across EMEA.
•Provide governance, direction and constructive challenge to country information security activities.
•Ensure Country ISOs have the capability, guidance and support needed to meet local regulatory obligations.
•Promote consistent, high-quality execution of information security oversight across countries and legal entities.
•Align country-level information security priorities with broader GIS objectives.
Stakeholder Management and Influence
•Build trusted relationships with regional executives, legal entity boards and control partners.
•Serve as the senior information security adviser to regional management teams, influencing decisions at the highest level.
•Partner with Enterprise Risk, Compliance, Audit and Legal leadership to address regulatory and risk management priorities.
•Contribute to the bank's engagement with industry, government and public-private sector partnerships focused on cyber resilience and information security.
Leadership and People Development
•Lead, mentor and develop a geographically distributed team across multiple jurisdictions.
•Foster a culture of accountability, collaboration and continuous improvement.
•Build a diverse, high-performing team aligned with GIS leadership principles.
•Strengthen the GIS talent pipeline across EMEA, developing the next generation of security leaders.
The EMEA RISO will have direct management responsibility for Country Information Security Officers and will be accountable for:
•Building and sustaining a high-performing regional team.
•Driving consistency of execution across countries and jurisdictions.
•Managing regional resourcing and organisational priorities.
•Delivering strategic objectives aligned with International RISO priorities and GIS business outcomes.
Requirements
•A senior leader with extensive experience in information security, cyber risk management, technology risk, operational risk or a related field.
•Significant experience operating at a senior level within highly regulated financial services environments.
•Deep understanding of information security governance, regulatory frameworks and cyber risk management practices.
•A proven track record of engaging with and influencing regulators, board members and senior executives.
•Proven leadership of geographically distributed teams, with the ability to set direction and drive accountability at scale.
•Strong command of regional and global cybersecurity threats and associated control environments.
•The ability to influence across complex, matrixed organisations and deliver outcomes through partnership and collaboration.
•Exceptional communication, stakeholder management and board-level presentation skills.
•Strong strategic thinking, sound judgement and decisive problem-solving capabilities.
•CISSP, CISM or equivalent industry certifications.
•Experience supporting multinational financial institutions.
•Knowledge of European regulatory frameworks, including DORA, NIS2, ECB expectations and country-specific requirements.
•Experience managing regulatory examinations and remediation programmes.
•Expertise in enterprise risk management, regulatory relations and information security governance.
•Strong executive presence and credibility at board level.
•Expertise in cyber resilience and operational resilience.
Conditions / Benefits
•Bank of America is committed to an in-office culture with specific requirements for office-based attendance and an appropriate level of flexibility based on role-specific considerations.
•London office near St. Paul's Cathedral on King Edward Street, with modern workspaces, an auditorium, an onsite restaurant, rooftop terrace, onsite gym and medical centre.
•Chester office located against the backdrop of the North Wales hills and the River Dee.
•Private healthcare for employee and family plus an annual health screen, with option to purchase a screen for partner.
•Competitive pension plan, life assurance and group income protection cover.
•26 weeks paid maternity leave, 16 weeks paid paternity leave, inclusive family leave arrangements.
•20 days of back-up childcare (including school holiday clubs) and 20 days of back-up adult care per annum.
•Flexible core and additional benefits including wellbeing account, travel insurance, critical illness cover, cycle-to-work scheme.
•Flex fund to use towards benefits.
•Emotional wellbeing helpline and virtual GP services.
•Access to the Peppy App (men's health, women's health, fertility, menopause, pregnancy & parenthood support).
•Access to gyms, exercise classes and wellbeing apps through Wellhub, including Headspace and Calm.
•Ability to donate to charities via payroll with company contribution matching.
•Opportunity to volunteer in the local community.
