Identity and Access Management Information Security Senior Controls Specialist

Denver, Colorado;Washington, District of Columbia; Chicago, Illinois

Job Description:

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We’re devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.

Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!

The Global Information Security (GIS) Identity & Access Management (IAM) Info Security Senior Controls Specialist must possess a deep understanding of IAM concepts, relevant knowledge of IAM business, and strong technical expertise. To be successful, the proactive candidate will be conducting analysis of IAM systems related to the governance of Service Accounts to identify process improvements, proactively recommending, and implementing strategies to enhance governance, streamline processes, close gaps, and ensure optimal reporting and monitoring is in place. They will work closely with dev teams, security subject matter experts, and other key partners (CIOs, Risk, Compliance, end-users) to integrate governance throughout the Service Account lifecycle that demonstrates adherence to external and internal regulations.

Responsibilities:

• Develops/challenges enterprise-wide information security policies, procedures, and standards related to Service Account Governance with supporting industry leading information security reporting, risk scoring, and governance to ensure adherence to requirements.

• Manages internal and external stakeholder relationships including Line of Business, CIO delegates, Core Technology Infrastructure, Cyber Security Technology, Third Party management, Global Compliance and Operations Risk (CGOR), internal audit, and regulatory agencies.

• Analyzes existing Information Technology systems and processes to identify areas of vulnerability, provide mitigation tactics, and design/implement improved systems and processes to ensure Information Technology systems meet enterprise standards, adhere to applicable rules, laws, and regulations, and comply with appropriate treatment of risk.

• Proficient in articulating facts from data-driven plans to partners and stakeholders ensuring adoption of intended solutions to drive risk reductions and adherence that support relevant Identity and Authentication requirements.

• Create a backlog of tactical/strategic Service Account Governance initiatives that will reduce risk and increase adoptability. Through risk ranking, and agreement on priorities, drive initiatives to completion.

• Through recurring engagements, clearly articulate rationale, and methods behind proposed changes through informative materials that can educate from end-user to CIOs.

• Engage senior management to provide factual, transparent, and timely reporting on existing and emerging Service Account risks.

Required Qualifications:

• 10+ years of hands-on IAM experience in a large and complex organization with a deep understanding of IAM concepts, relevant knowledge of IAM business, and strong technical expertise.

• Experience with the following: BeyondTrust, CyberArk, Thycotic, Centrify, Hashicorp, or other Service Account lifecycle management solutions would be an advantage.

• Knowledge and understanding of Identity and Access Management specific laws, rules, regulations, and Guidelines such as SOX, OCC, NIST, ISO/EC, FFIEC within the financial services sector would be an advantage.

• Possession of CISSP certification would be an advantage.

• Knowledge of identity and authentication methodologies, techniques, and technologies.

• Security knowledge which covers core technology infrastructure (Account management, servers, databases, etc.) identity management and application security practice.

Desired Qualifications:

• Experience with Linux, Windows, Cloud Identity, Access Management, design and architecture of authentication services or Identity Store.

• Active Directory, LDAP, Azure AD experience, Mainframe, Mid-range

• Experience with programming languages, for example as Java, Python, SQL, and PowerShell.

• Strong attention to detail and advanced analytical skills.

• Excellent communication and presentation skills.

• Excellent organizational skills and be able to effectively prioritize multiple tasks.

• Hands on experience and involvement in large and complex projects.

• Proficient in data management which includes strong data analytical capabilities with advanced understanding of the collection and management of metadata.

• This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Shift:

1st shift (United States of America)

Hours Per Week:

40

Pay Transparency details

US - CO - Denver - 1144 15th St - Denver Gis (CO9926), US - DC - Washington - 1800 K St NW - 1800 K Street NW (DC1842)

Pay and benefits information

Pay range

$130,000.00 - $176,900.00 annualized salary, offers to be determined based on experience, education and skill set.

Discretionary incentive eligible

This role is eligible to participate in the annual discretionary plan. Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.

Benefits

This role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.

Bank of America and its affiliates consider for employment and hire qualified candidates without regard to race, religious creed, religion, color, sex, sexual orientation, genetic information, gender, gender identity, gender expression, age, national origin, ancestry, citizenship, protected veteran or disability status or any factor prohibited by law, and as such affirms in policy and practice to support and promote the concept of equal employment opportunity and affirmative action, in accordance with all applicable federal, state, provincial and municipal laws. The company also prohibits discrimination on other bases such as medical condition, marital status or any other factor that is irrelevant to the performance of our teammates.

To view the "EEO is the Law" poster, CLICK HERE (https://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf) .

To view the "EEO is the Law" Supplement, CLICK HERE (https://www.dol.gov/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf) .

View the LA County Fair Chance Ordinance (https://dcba.lacounty.gov/wp-content/uploads/2024/08/FCOE-Official-Notice-Eng-Final-8.30.2024.pdf) .

Bank of America aims to create a workplace free from the dangers and resulting consequences of illegal and illicit drug use and alcohol abuse. Our Drug-Free Workplace and Alcohol Policy (“Policy”) establishes requirements to prevent the presence or use of illegal or illicit drugs or unauthorized alcohol on Bank of America premises and to provide a safe work environment.

To view Bank of America’s Drug-free Workplace and Alcohol Policy, CLICK HERE .

This communication provides information about certain Bank of America benefits. Receipt of this document does not automatically entitle you to benefits offered by Bank of America. Every effort has been made to ensure the accuracy of this communication. However, if there are discrepancies between this communication and the official plan documents, the plan documents will always govern. Bank of America retains the discretion to interpret the terms or language used in any of its communications according to the provisions contained in the plan documents. Bank of America also reserves the right to amend or terminate any benefit plan in its sole discretion at any time for any reason.