Kris Fador

Kris Fador is the Chief Information Security Officer of Bank of America.

Career path

Fador holds the Chief Information Security Officer title at Bank of America, a role confirmed in the bank's own announcement of its planned acquisition of UK information security consultancy MDSec Consulting Limited.

In that July 2026 announcement, Fador stated, "We have long admired the exceptional ability of the MDSec team and are delighted that Bank of America and its clients will now further benefit from their work," said Kris Fador, Chief Information Security Officer, Bank of America.

Trade press covering the deal, including SecurityWeek and Finextra, likewise identified Fador as Bank of America's chief information security officer when reporting the MDSec acquisition.

Fador is also listed as a trustee of Lake Forest College, a member of the class of 2004, with a board term running through 2029; the college's board page identifies this trustee as Chief Information Security Officer, Bank of America.

Remit

Fador's role sits within a security organization that already maintains a large footprint in the north of England, including more than 1,400 Bank of America employees based near Chester, where the bank operates one of its cyber threat operations centers.

The MDSec transaction, expected to close in the fourth quarter of 2026 subject to regulatory approval, is intended to extend this UK-based technical security capability; MDSec is headquartered in Macclesfield and employs about 65 cybersecurity professionals delivering technical information security consulting services.

Bank of America describes itself as one of the world's leading financial institutions, serving more than 69 million clients through approximately 3,500 retail financial centers, roughly 15,000 ATMs and about 60 million verified digital banking users.

MDSec co-founder Dominic Chell said joining the bank would let MDSec advance its technical innovation and security-capability ambitions as part of a major financial institution.

Coverage of the acquisition framed it as part of a broader push by financial institutions to strengthen in-house cyber defenses against increasingly sophisticated threats, including AI-driven attack techniques.