Senior Security Engineer - ServiceNow SIR & DLP

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.

Being a Great Place to Work and providing a culture of caring is core to how we drive Responsible Growth. We are intentional about fostering an inclusive workplace where every teammate has the opportunity to succeed, build a career and contribute to our shared success. This includes attracting and developing exceptional talent, recognizing and rewarding performance, and supporting our teammates’ physical, emotional, and financial wellness through affordable, competitive and flexible benefits.

We value the unique perspectives individuals bring from all backgrounds and career paths - whether shaped by military service, community college education, or a wide range of work and life experiences. These journeys foster resilience, leadership and innovation, strengthening our workforce and positively impact the communities we serve.

Bank of America is committed to an in-office culture that supports collaboration, engagement, and career development. Our approach includes clear in-office expectations, while providing an appropriate level of flexibility based on role-specific responsibilities and business needs.

At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!

Role Description

Senior Technology Delivery Lead will lead the end-to-end technology delivery of our enterprise ServiceNow Security Incident Response (SIR) and Data Loss Prevention (DLP) capabilities.

You will be accountable for bringing together technology strategy, engineering, platform development, integration, program execution, and operational readiness to deliver scalable security capabilities across the enterprise. The role will lead multiple teams through the design, development, testing, implementation, and ongoing evolution of ServiceNow SIR and DLP, partnering closely with Cybersecurity Operations, Data Protection, Technology, Risk, Compliance, and business stakeholders.

The Senior Technology Delivery Lead will own the overall execution and delivery strategy, translating business and cybersecurity requirements into technology solutions and driving complex initiatives from concept through production. This includes managing delivery roadmaps, technical dependencies, engineering execution, resources, financials, risks, and senior stakeholder alignment.

The successful candidate will have demonstrated experience leading large-scale, complex technology implementations, building and managing engineering teams, delivering enterprise platforms, and driving outcomes across organizational boundaries. The leader will combine strong technology acumen with the ability to simplify complexity, remove impediments, make decisions, and communicate effectively with both executive and technical audiences.

This is a highly visible technology leadership role with exposure to senior leadership, auditors, regulators, and key control partners. While a strong software engineering and platform background is required, the role is focused on technology leadership and delivery rather than personal delivery of code.

Required Qualifications

• Demonstrated experience as a senior technology delivery leader responsible for complex, enterprise-scale technology programs or platforms.

• Proven ability to lead multiple engineering and development teams through large-scale technology implementations.

• Strong experience with ServiceNow development, implementation, and enterprise integration, preferably within cybersecurity or security operations.

• Experience delivering security workflows, case management, automation, and integrations in a large enterprise environment.

• Strong understanding of Security Incident Response, Data Loss Prevention, cybersecurity operations, and data protection processes.

• Experience integrating ServiceNow with cybersecurity platforms, detection technologies, enterprise data sources, and supporting systems.

• Strong understanding of APIs, integration patterns, workflow automation, data models, application architecture, and software engineering practices.

• Working knowledge of ServiceNow development technologies, including JavaScript, ServiceNow scripting, and APIs, with the ability to guide technical design and engineering decisions.

• Demonstrated experience managing technology roadmaps, delivery dependencies, resources, financials, risks, and executive-level reporting.

• Strong leadership and communication skills with the ability to influence across engineering, cybersecurity, business, control, and executive organizations.

• Proven ability to navigate ambiguity, simplify complex problems, remove impediments, and drive teams toward measurable outcomes.

Preferred Qualifications

• Experience leading ServiceNow Security Operations / Security Incident Response implementations in a large enterprise environment.

• Experience with enterprise Data Loss Prevention technologies and DLP case-management processes.

• Experience leading complex cybersecurity technology transformation programs.

• Experience in cybersecurity operations, incident response, data protection, and security engineering.

• Familiarity with ITIL practices and relevant ServiceNow certifications.

• Knowledge of cybersecurity, privacy, data protection, regulatory, and compliance requirements.

• Experience leading technology programs involving multiple platforms, integrations, vendors, and organizational stakeholders.

• Experience driving workflow automation, orchestration, process standardization, and operational transformation.

• Bachelor’s or Master’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent professional experience.

Key Responsibilities

Technology Delivery & Leadership

• Provide end-to-end technology leadership and accountability for the design, development, testing, implementation, and ongoing enhancement of ServiceNow SIR and DLP capabilities.

• Lead multiple engineering and development teams, establishing clear priorities, delivery plans, accountability, and execution discipline.

• Translate cybersecurity and business strategies into technology roadmaps, architecture, engineering deliverables, and implementation plans.

• Drive execution across complex, interdependent technology initiatives while proactively managing risks, dependencies, issues, and delivery challenges.

• Establish strong engineering and delivery practices across design, development, testing, deployment, operational readiness, and ongoing platform support.

• Ensure solutions are scalable, resilient, sustainable, and aligned with enterprise technology and security standards.

Cross-Team & Executive Leadership

• Work across business, cybersecurity, and technology organizations at the executive level to deliver integrated SIR and DLP capabilities that strengthen incident response and protect sensitive information.

• Manage relationships across business and technology executives, sponsors, product owners, architecture, control partners, and vendors to drive decisions and successful implementation.

• Create alignment across multiple teams and organizations with competing priorities, dependencies, and delivery requirements.

• Identify and resolve organizational and technical impediments while driving opportunities to simplify processes and improve execution.

• Provide clear, concise communication to senior leadership regarding delivery progress, risks, dependencies, decisions, financials, and outcomes.

• Conduct portfolio-level resource, financial, dependency, and delivery management activities.

SIR & DLP Technology Implementation

• Lead the implementation of ServiceNow Security Incident Response and Data Loss Prevention capabilities, including event intake, enrichment, triage, investigation, case management, escalation, remediation, and closure workflows.

• Oversee integrations between ServiceNow and enterprise security detection, incident response, DLP, and supporting technology platforms to enable automated event ingestion, enrichment, routing, and orchestration.

• Drive standardized workflows and automation that improve speed, consistency, efficiency, and traceability across security incident and data protection processes.

• Establish risk-based capabilities to categorize and prioritize security incidents and DLP events based on factors including severity, data sensitivity, business context, and potential impact.

• Partner across Cybersecurity Operations, Data Protection, Technology, Risk, Compliance, Privacy, Legal, and business teams to translate operational requirements into scalable technology solutions.

• Drive dashboards and reporting that provide visibility into security incidents, DLP cases, workflow performance, trends, and risk outcomes.

• Ensure appropriate controls, traceability, documentation, and governance are incorporated throughout SIR and DLP technology workflows.

Engineering, Automation & Integration

• Provide technology leadership for ServiceNow development, engineering, integration, workflow automation, and platform capabilities.

• Drive automation across SIR and DLP processes to reduce manual activities, accelerate response, and improve consistency.

• Lead integration of ServiceNow with enterprise cybersecurity technologies, data sources, and operational platforms.

• Establish reusable integration, automation, and workflow patterns that support both current requirements and future security use cases.

• Ensure appropriate data quality, resiliency, performance, security, and controls across platform integrations.

• Partner with architecture and engineering teams to ensure solutions align with enterprise architecture and technology standards.

• Drive engineering decisions and trade-offs necessary to balance speed, scalability, resiliency, risk, and long-term sustainability.

Delivery Governance, Metrics & Operational Readiness

• Establish and manage integrated technology delivery plans, roadmaps, milestones, dependencies, risks, and implementation readiness.

• Develop meaningful metrics and dashboards to provide visibility into technology delivery, implementation progress, operational readiness, platform performance, and risk.

• Establish governance mechanisms to identify and quickly resolve delivery risks, technical issues, and cross-team dependencies.

• Ensure appropriate testing, production readiness, implementation, change management, and post-implementation support are incorporated into delivery plans.

• Provide transparent reporting and executive-level communications on overall program health, key decisions, risks, and outcomes.

Continuous Improvement & Transformation

• Identify opportunities to improve SIR and DLP capabilities through automation, workflow optimization, platform modernization, and technology integration.

• Drive simplification and standardization to reduce unnecessary complexity and manual handoffs across technology and operational processes.

• Partner with security operations teams to continuously evolve capabilities as threats, technologies, regulations, and business requirements change.

• Establish mechanisms for translating operational feedback, lessons learned, and technology insights into future platform enhancements.

• Identify opportunities to leverage orchestration, intelligent automation, and emerging technologies to improve security operations.

Risk, Controls & Compliance

• Ensure technology solutions support applicable internal policies, control requirements, regulatory obligations, and cybersecurity standards.

• Integrate appropriate risk management, controls, documentation, traceability, and evidence into technology delivery and platform capabilities.

• Support audit, regulatory, and compliance activities by providing accurate and timely information regarding technology implementation, workflows, controls, and delivery.

• Proactively identify technology and delivery risks and partner with appropriate stakeholders to develop mitigation strategies.

• Ensure delivery decisions appropriately balance business outcomes, cybersecurity risk, technology risk, and operational resiliency.

Desired Certifications

• Certified System Administrator (CSA)

• Certified Implementation Specialist – Data Foundations (CIS-DF)

• Certified Implementation Specialist – Security Incident Response (CIS – SIR)

Shift:

Hours Per Week: