Sr. Process Design Consultant - Information Security

📍 Job Overview

Job Title: Sr. Process Design Consultant - Information Security

Company: Bank of America

Location: Denver, Colorado, United States; Washington, District of Columbia, United States; Chicago, Illinois, United States

Job Type: Full time

Category: Operations & Process Improvement / Information Security Operations

Date Posted: August 10, 2026

Experience Level: 8+ Years

Remote Status: Hybrid

🚀 Role Summary

• Drive enterprise-wide process design and operational improvement initiatives within the Information Security domain.

• Lead complex cross-functional transformation efforts to reduce risk, enhance delivery consistency, and streamline cybersecurity technology operations.

• Act as a senior individual contributor and trusted advisor, influencing stakeholders to implement scalable and sustainable process solutions.

• Apply Lean Six Sigma methodologies and quality practices to improve user experience, strengthen process maturity, and optimize technology delivery lifecycles.

📝 Enhancement Note: While the title specifies "Information Security," the core responsibilities and required skills clearly indicate a strong focus on operations, process design, and continuous improvement within that domain. This role is best categorized under Operations & Process Improvement with a specialization in Information Security Operations, aligning with the need for structured problem-solving, workflow optimization, and risk reduction.

📈 Primary Responsibilities

• Design and optimize enterprise-level processes, ensuring alignment with business strategy, risk appetite, regulatory mandates, and cybersecurity technology delivery objectives.

• Lead and manage complex process improvement initiatives aimed at reducing operational friction, enhancing control adherence, and increasing the consistency of cybersecurity technology delivery outcomes.

• Influence senior stakeholders and cross-functional partners by identifying improvement opportunities, shaping future-state operating models, and driving the adoption of new processes and methodologies.

• Facilitate critical workshops, including current-state assessments, root cause analysis, and future-state design sessions involving diverse groups of stakeholders.

• Apply Lean Six Sigma principles and quality management practices in a practical and scalable manner suitable for the bank's operational environment.

• Define, establish, and track key performance indicators (KPIs) to measure improvement outcomes, and effectively communicate progress, risks, and value realization to leadership.

• Embed continuous improvement practices into daily operations to enhance user experience, elevate process maturity, and streamline the overall technology delivery lifecycle.

• Contribute to the advancement of the Portfolio Quality & Operations (PQ&O) vision by systematizing a culture of continuous improvement within the cybersecurity technology space.

📝 Enhancement Note: The responsibilities emphasize a strategic and hands-on approach to process optimization, requiring the candidate to not only design but also influence adoption and measure impact. The focus on "cybersecurity technology delivery" highlights the specific operational context.

🎓 Skills & Qualifications

Education: While not explicitly stated, a Bachelor's degree in a relevant field such as Business Administration, Information Technology, Operations Management, or a related discipline is typically expected for a Senior Consultant role. Advanced degrees or certifications can be advantageous.

Experience: Minimum of 8 years of progressive experience in process design, continuous improvement, operational excellence, business transformation, or a closely related discipline.

Required Skills:

• Advanced expertise in enterprise process design, continuous improvement methodologies (e.g., Lean, Six Sigma), and structured problem-solving techniques.

• Proven ability to lead large-scale organizational change initiatives and effectively influence stakeholders across matrixed environments to drive adoption.

• Strong understanding of operational risk frameworks, internal controls, regulatory compliance requirements, and the specifics of cybersecurity technology delivery.

• Demonstrated capacity to translate ambiguous problems into structured analysis, actionable recommendations, and sustainable operational workflows.

• Data-driven approach with proficiency in defining metrics, establishing baselines, analyzing performance trends, and quantifying business impact.

• Executive-level communication and presentation skills, with the ability to articulate complex concepts clearly and concisely to senior leadership.

• Exceptional facilitation, coaching, relationship-building, and cross-functional collaboration skills, fostering a team-oriented approach. Preferred Skills:

• Lean Six Sigma Black Belt or Master Black Belt certification.

• Experience within the financial services industry, particularly in technology, cybersecurity, or other highly regulated environments.

• Proven track record of leading enterprise-scale transformation programs and operating model redesign initiatives.

• Familiarity with advanced process improvement tools such as process mining, workflow automation platforms, AI-enabled process improvement solutions, or sophisticated data analytics tools.

📝 Enhancement Note: The required qualifications emphasize a blend of technical process expertise, change management capabilities, and a strong understanding of the regulated financial services and cybersecurity landscape. The "desired" qualifications point towards candidates with advanced certifications and experience with cutting-edge process improvement technologies.

📊 Process & Systems Portfolio Requirements

Portfolio Essentials:

• Demonstrable examples of complex process redesign projects that resulted in quantifiable improvements in efficiency, risk reduction, or control adherence.

• Case studies detailing the application of Lean Six Sigma or similar methodologies to solve operational challenges within a technology or security context.

• Evidence of designing and implementing sustainable workflows that improved consistency and predictability in technology delivery lifecycles.

• Documentation showcasing the ability to define success metrics, baseline performance, and track ROI for process improvement initiatives. Process Documentation:

• Examples of current-state process maps, future-state designs, and gap analyses for complex operational workflows.

• Documentation of process improvement project plans, including stakeholder engagement strategies and change management approaches.

• Metrics dashboards or reports illustrating the measurement and ongoing monitoring of process performance and achieved business value.

📝 Enhancement Note: For a Senior Process Design Consultant role, a robust portfolio is critical. It should showcase not just the design but the entire lifecycle of process improvement, including stakeholder management, implementation challenges, and measurable outcomes, particularly within a regulated environment like financial services.

💵 Compensation & Benefits

Salary Range: $165,700 - $177,000 annualized salary. Offers will be determined based on experience, education, and skill set.

Benefits:

• Competitive benefits package, including industry-leading health, dental, and vision insurance.

• Generous paid time off (PTO) for vacation, personal days, and sick leave.

• Flexible benefits options to cater to individual and family needs.

• Eligibility for an annual discretionary incentive plan based on individual, team, and company performance.

• Access to resources and support programs focused on employee well-being (physical, emotional, and financial).

Working Hours: 40 hours per week, typically within the 1st shift (United States of America). While the role is hybrid, specific in-office days will be determined by business needs and team structure.

📝 Enhancement Note: The salary range is provided for Denver, CO, and is competitive for a Senior Process Design Consultant role in a major financial institution. The benefits listed are standard for a large corporation like Bank of America, with a notable mention of the discretionary incentive plan, which is common for senior individual contributor roles. The "hybrid" work arrangement suggests a requirement for some in-office presence, likely for collaboration and stakeholder engagement.

🎯 Team & Company Context

🏢 Company Culture

Industry: Financial Services, with a significant focus on Information Security Technology. Bank of America operates in a highly regulated environment, requiring stringent adherence to compliance and risk management standards. This industry context demands robust, secure, and efficient processes.

Company Size: Large enterprise (over 10,000 employees). This size implies a complex organizational structure, extensive resources, and the potential for significant impact but also requires navigating established hierarchies and processes.

Founded: 1998 (through the merger of NationsBank and BankAmerica). Bank of America has a long history and a strong presence in the financial sector, indicating stability and a deep understanding of market dynamics.

Team Structure:

• The role sits within Portfolio Quality & Operations (PQ&O) within Cyber Security Technology (CST). This suggests a dedicated operations and quality assurance function supporting the broader cybersecurity technology teams.

• The team likely comprises process improvement specialists, quality analysts, and operational managers focused on enhancing the effectiveness and efficiency of cybersecurity operations.

• Collaboration is expected with various cybersecurity technology teams, risk management, compliance, and potentially other business units to implement and optimize processes. Methodology:

• Emphasis on applying Lean Six Sigma and quality management practices to achieve "Responsible Growth."

• Focus on data-driven decision-making, risk reduction, and operational efficiency.

• Commitment to continuous improvement as a core component of safeguarding the bank's strategic advantage.

Company Website: https://www.bankofamerica.com/

📝 Enhancement Note: The company culture is described as one that values "Responsible Growth" and fostering an inclusive workplace. The emphasis on an "in-office culture" supports collaboration and career development, which is important for a role requiring significant stakeholder interaction and change management. The operations context within a large, regulated financial institution means processes must be thorough, well-documented, and focused on risk mitigation.

📈 Career & Growth Analysis

Operations Career Level: Senior Individual Contributor. This role is positioned as a key expert in process design and continuous improvement, expected to lead complex initiatives and influence senior stakeholders without direct reports. The focus is on deep functional expertise and project leadership.

Reporting Structure: The role reports into Portfolio Quality & Operations (PQ&O) within Cyber Security Technology (CST). This structure suggests a center of excellence for operational excellence within the security technology domain, reporting up through the cybersecurity leadership chain.

Operations Impact: This role has a direct impact on reducing operational risk, improving the efficiency and effectiveness of cybersecurity technology delivery, and strengthening the bank's overall security posture. By optimizing processes, the consultant helps ensure compliance, reduce potential breaches, and enhance the speed and reliability of critical security functions, thereby safeguarding the bank's strategic advantage and financial health.

Growth Opportunities:

• Specialization: Deepen expertise in cybersecurity process optimization, operational risk management within financial services, or advanced process improvement technologies (e.g., process mining, AI).

• Leadership: Transition into management roles within PQ&O or CST, leading teams of process specialists, or move into broader program management or operational leadership positions.

• Cross-Functional Mobility: Leverage process improvement skills to move into roles in other operational areas, business transformation, or strategic planning within Bank of America.

• Skill Development: Opportunities to gain advanced certifications (e.g., Lean Six Sigma Master Black Belt), learn new technologies, and develop executive stakeholder management skills.

📝 Enhancement Note: The career path for a Senior Process Design Consultant at a large institution like Bank of America typically involves becoming a subject matter expert, leading larger and more complex initiatives, and potentially moving into management or strategic advisory roles. The emphasis on "Responsible Growth" and "safeguarding strategic advantage" highlights the critical nature of this role.

🌐 Work Environment

Office Type: Hybrid. Bank of America emphasizes an "in-office culture" to support collaboration, engagement, and career development. This role will require a balance of remote work and in-office presence in one of the designated locations.

Office Location(s): The role is open to Denver, CO; Washington, D.C.; and Chicago, IL. These are major metropolitan hubs, suggesting well-equipped corporate office environments.

Workspace Context:

• The office environment will likely foster collaboration, with opportunities to engage with diverse teams across cybersecurity technology and operations.

• Access to standard corporate IT infrastructure, including necessary software, collaboration tools, and potentially advanced analytics platforms to support process design and analysis.

• Expect a professional, fast-paced environment typical of large financial institutions, with a strong emphasis on security protocols and compliance.

Work Schedule: Standard 40-hour work week, typically within the 1st shift (daytime hours). While hybrid, flexibility may be available depending on project needs and team dynamics, but core business hours and in-office presence will be expected.

📝 Enhancement Note: The hybrid model suggests a need for in-office days, likely for team meetings, workshops, and direct collaboration with stakeholders. The designated locations are significant financial centers, implying access to robust office infrastructure and a professional working atmosphere.

📄 Application & Portfolio Review Process

Interview Process:

• Initial Screening: HR or recruiter will assess basic qualifications and fit.

• Hiring Manager Interview: Focus on experience, leadership, and understanding of process improvement principles within a security context.

• Panel/Team Interviews: Likely to include peer consultants and stakeholders from CST and PQ&O. Expect behavioral questions, scenario-based problem-solving, and discussion of past projects.

• Portfolio Presentation/Case Study: A critical step where candidates will be expected to present detailed case studies of their process improvement work, demonstrating impact and methodology.

• Final Interview: May involve senior leadership to assess strategic thinking and overall fit with the organization.

Portfolio Review Tips:

• Quantify Impact: For each project, clearly articulate the problem, your role, the solution implemented, and most importantly, the measurable results (e.g., % reduction in cycle time, % improvement in control adherence, cost savings, risk reduction).

• Showcase Methodology: Detail the specific process improvement frameworks (Lean Six Sigma, etc.) and analytical tools used. Explain why you chose a particular approach.

• Demonstrate Influence: Highlight instances where you successfully influenced senior stakeholders, managed resistance to change, and drove adoption of new processes.

• Tailor to Security: Emphasize projects or examples relevant to operational risk, compliance, or technology delivery, ideally within a regulated industry.

• Structure: Organize your portfolio logically, perhaps by project type or by the process improvement lifecycle stages. Be prepared to walk through 2-3 key projects in detail.

Challenge Preparation:

• Process Mapping & Analysis: Be ready to analyze a hypothetical process (e.g., a cybersecurity incident response workflow) and identify potential areas for improvement, risks, and inefficiencies.

• Problem-Solving Scenarios: Prepare to discuss how you would approach a complex, ambiguous operational challenge within cybersecurity technology delivery. Focus on your structured problem-solving approach.

• Change Management Strategy: Think about how you would gain buy-in for a significant process change from diverse stakeholder groups, including technical teams and senior leadership.

📝 Enhancement Note: Given the senior nature of the role and the emphasis on impact, a robust portfolio and the ability to articulate past successes with data are paramount. Candidates should anticipate in-depth questions about their experience with structured problem-solving and change management in complex environments.

🛠 Tools & Technology Stack

Primary Tools:

• Process Design & Modeling: Tools like Visio, Lucidchart, or specialized process modeling software. Experience with BPMN (Business Process Model and Notation) is highly beneficial.

• Continuous Improvement Frameworks: Deep knowledge and practical application of Lean Six Sigma principles and tools (DMAIC, Value Stream Mapping, Kaizen).

• Project Management: Proficiency with project management software (e.g., MS Project, Jira, Asana) for tracking initiatives.

Analytics & Reporting:

• Data Analysis Tools: Excel (advanced functions, pivot tables), potentially SQL for data extraction, and BI tools like Tableau or Power BI for visualization and reporting.

• Metrics Definition & Tracking: Experience establishing and monitoring KPIs, operational dashboards, and performance scorecards.

CRM & Automation:

• Workflow Automation: Familiarity with workflow automation concepts and potentially tools like ServiceNow, RPA platforms (e.g., UiPath, Automation Anywhere), or low-code/no-code platforms.

• Process Mining Tools (Desired): Experience with tools such as Celonis, Signavio, or similar for automated process discovery and analysis.

• Enterprise Systems: Understanding of how processes integrate with core enterprise systems, including potentially GRC (Governance, Risk, and Compliance) platforms.

📝 Enhancement Note: While specific tools aren't listed, the responsibilities point to a need for proficiency in process mapping, data analysis, project management, and ideally, experience with or exposure to automation and process mining technologies. Candidates should be prepared to discuss their experience with tools that facilitate process design, analysis, and improvement.

👥 Team Culture & Values

Operations Values:

• Responsible Growth: A core company value emphasizing sustainable and ethical business practices, which translates to process designs that are robust, compliant, and risk-aware.

• Client Focus: While this role is internal, processes are designed to ultimately support the bank's ability to serve its clients effectively and securely.

• Data-Driven: Decisions and improvements are expected to be grounded in data analysis and measurable outcomes, not just intuition.

• Efficiency & Effectiveness: A constant drive to streamline operations, reduce waste, and ensure processes deliver desired results reliably.

• Collaboration: A strong emphasis on working effectively across teams and departments to achieve shared goals.

Collaboration Style:

• Cross-Functional Integration: Expect to work closely with cybersecurity engineers, architects, risk managers, compliance officers, and other operational teams.

• Consultative Approach: Act as an internal consultant, guiding teams through process improvement methodologies and facilitating their participation in design and implementation.

• Open Communication: A culture that encourages constructive feedback and open dialogue to identify and resolve process issues collaboratively.

• Change Advocacy: Proactively championing new processes and methodologies, ensuring clear communication of benefits and addressing concerns to foster buy-in.

📝 Enhancement Note: The culture at Bank of America, as described, values a blend of strategic thinking, data-driven execution, and collaborative problem-solving. For operations professionals, this means being adept at working with diverse teams and championing improvements that align with the company's core values, particularly risk mitigation and responsible growth.

⚡ Challenges & Growth Opportunities

Challenges:

• Navigating a Large, Regulated Organization: Implementing process changes in a complex, highly regulated environment like Bank of America requires significant stakeholder management, adherence to strict compliance, and patience.

• Balancing Security Needs with Efficiency: Ensuring that process improvements do not compromise security posture or introduce new risks is a constant challenge in the cybersecurity domain.

• Driving Adoption of New Processes: Overcoming inertia and resistance to change among established teams and ensuring sustained adherence to new workflows.

• Translating Ambiguity into Action: Working with complex, often ill-defined operational challenges in cybersecurity and translating them into clear, actionable process designs.

Learning & Development Opportunities:

• Advanced Certifications: Pursue Lean Six Sigma Master Black Belt certification or specialized certifications in cybersecurity risk management or process automation.

• Exposure to Cutting-Edge Technologies: Gain experience with process mining, AI-driven process optimization, and advanced workflow automation tools.

• Leadership Development: Opportunities to lead larger, more strategic transformation programs and potentially mentor junior team members.

• Industry Knowledge: Deepen understanding of financial services regulations, cybersecurity threats, and technology trends impacting the industry.

📝 Enhancement Note: The challenges highlight the complexity of the role, requiring strong problem-solving skills and resilience. The growth opportunities are substantial, offering pathways for deep specialization, leadership, and continuous learning within a leading financial institution.

💡 Interview Preparation

Strategy Questions:

• "Describe a complex process improvement initiative you led from inception to completion. What was the business problem, your methodology, the key challenges, and the quantifiable results?" (Focus on demonstrating structured problem-solving, stakeholder influence, and impact measurement.)

• "How would you approach designing a new process for [hypothetical cybersecurity technology delivery scenario, e.g., onboarding a new security tool]? What are the key considerations and potential risks?" (Assess your understanding of process design principles and risk assessment in a security context.)

• "Imagine a team is resistant to adopting a new process you've designed. How would you influence them and ensure successful adoption?" (Evaluate your change management and stakeholder management skills.) Company & Culture Questions:

• "What do you know about Bank of America's commitment to 'Responsible Growth' and how would your role as a Process Design Consultant contribute to it?" (Demonstrate your understanding of the company's values and how your work aligns.)

• "How do you see the role of continuous improvement evolving within cybersecurity operations in a large financial institution?" (Showcase your strategic thinking and industry awareness.)

• "Describe a time you had to collaborate with a difficult stakeholder or team. How did you manage the relationship and achieve your objective?" (Assess your interpersonal and collaboration skills.) Portfolio Presentation Strategy:

• Storytelling: Frame your case studies as compelling narratives that highlight the problem, your analytical journey, the solution, and the impactful outcome.

• Data Visualization: Use clear charts and graphs to present metrics and demonstrate quantifiable results. Ensure your data is accurate and easy to interpret.

• Process Flows: Visually represent current and future-state processes to clearly illustrate the improvements made.

• Conciseness: Be prepared to present key projects within a set timeframe, focusing on the most impactful aspects and demonstrating your ability to communicate complex information efficiently.

• Q&A Readiness: Anticipate questions about your methodology, challenges, and the scalability of your solutions.

📝 Enhancement Note: Interview preparation should focus on demonstrating a strong command of process improvement methodologies, proven leadership in change management, and the ability to articulate tangible business value, especially within the context of risk and security in financial services.

📌 Application Steps

To apply for this operations position:

• Submit your application through the provided Workday link on the Bank of America careers portal.

• Resume Optimization: Tailor your resume to highlight your experience in process design, continuous improvement, operational excellence, and change management. Quantify achievements with specific metrics wherever possible, using keywords from the job description such as "Lean Six Sigma," "business transformation," "operational risk," and "cybersecurity technology."

• Portfolio Preparation: Compile a portfolio showcasing 2-3 key process improvement projects. Each case study should detail the problem, your methodology, challenges faced, solutions implemented, and quantifiable results. Be prepared to present these during the interview process.

• Interview Practice: Rehearse answers to common interview questions, focusing on behavioral examples that demonstrate your problem-solving, stakeholder management, and leadership skills. Practice articulating your experience concisely and impactfully.

• Company Research: Thoroughly research Bank of America's mission, values (especially "Responsible Growth"), and its position in the financial services industry. Understand the importance of information security and operational excellence within this context.

⚠️ Important Notice: This enhanced job description includes AI-generated insights and operations industry-standard assumptions. All details should be verified directly with the hiring organization before making application decisions.