Vice President, Senior Security Detection & Response Manager – Sydney

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success.

This job is responsible for the GIS Monitoring & Triage Sydney team, leading and guiding a rapid, globally coordinated, and managed response for a team of analysts responsible for initial analysis, monitoring, and escalation of security events that may impact the confidentiality, integrity, and availability of the bank’s information and information systems. This role ensures consistent quality of activities, processes and outputs by managing a team of US based employees.

The manager will be responsible for providing leadership direction to attract, assess, develop and motivate our dynamic cyber security analysts through ongoing guidance on procedural, technical and/or operational processes and controls. This role requires critical thinking and willingness to dig into the details, and adept at detecting and remediating organizational/process weaknesses and deficiencies. The candidate must be a strong communicator, who is willing to challenge the status quo and able to lead from the front using critical thinking skills and creative problem‑solving skills.

In addition to their primary functions, the manager will need to have a track record of driving change, translating business strategy into work programs and processes by contributing and/or participating in multiple implementation projects that represent significant risk exposure and/or are highly visible within the team impacting people, process, technology of the GIS execution strategy. The ideal candidate is a self‑starter, able to effectively manage multiple priorities and must be able to effectively build organizational alignment around strategy and change.

Responsibilities:

• Manages a team or teams accountable for providing cybersecurity defense across multiple disciplines.
• Leads the analysis, implementation, execution and ongoing improvement of proactive security controls to prevent external threat actors from infiltrating company information or systems.
• Utilizes experience and deep knowledge of IT platforms, tools, and concepts to ensure cybersecurity protection is integrated at all layers of defense.
• Leads alert responses and problem‑solving workgroups across multiple functions with a focus on the enterprise risk framework.
• Monitors escalations received from Lines of business and responds in a timely manner.
• Drives partnership between GIS operations and various organizations within the Enterprise ensuring optimal and effective interactions between our organizations.
• Provides input and support in SOC Transformation efforts.
• A team player who must be able to work under pressure, juggle multiple priorities, using initiative to meet deadlines without close supervision.
• Monitors workflow and team progress, provides feedback to manager/team.
• Coordinates with other sites/regions to ensure daily analyst goals are met.

Requirements:

• 5+ years of experience in cybersecurity, security operations, IT support, or related technical fields (internships, academic projects, or equivalent experience included).
• 5+ years of experience managing teams.
• Deep/advanced understanding of security detection, investigation, or incident response principles, with a demonstrated ability to learn and apply concepts across multiple domains.
• Oversight of detection strategy with log analysis and telemetry interpretation, including familiarity with querying or analyzing data leading to tooling optimization opportunities.
• Demonstrated leadership across security platforms and enterprise tooling technologies such as SIEM, EDR/XDR, identity systems.
• Foundational understanding of common attacker tactics, techniques, and procedures (TTPs), with familiarity of frameworks such as MITRE ATT&CK.
• Strong analytical and problem‑solving skills.
• Effective communication skills, including the ability to provide clear updates and collaborate with team members during investigations.
• Strong independent decision‑making and judgement in high‑risk environments.