Job Description :
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection.
Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.
One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We're devoted to being a diverse and inclusive workplace for everyone.
We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.
Bank of America believes both in the importance of working together and offering flexibility to our employees. We use a multi-faceted approach for flexibility, depending on the various roles in our organization.
Working at Bank of America will give you a great career with opportunities to learn, grow and make an impact, along with the power to make a difference. Join us!
The Global Information Security (GIS) Identity & Access Management (IAM) Info Security Senior Controls Specialist must possess a deep understanding of IAM concepts, relevant knowledge of IAM business, and strong technical expertise.
To be successful, the proactive candidate will be conducting analysis of IAM systems related to the governance of Service Accounts to identify process improvements, proactively recommending, and implementing strategies to enhance governance, streamline processes, close gaps, and ensure optimal reporting and monitoring is in place.
They will work closely with dev teams, security subject matter experts, and other key partners (CIOs, Risk, Compliance, end-users) to integrate governance throughout the Service Account lifecycle that demonstrates adherence to external and internal regulations.
Responsibilities :
- Develops / challenges enterprise-wide information security policies, procedures, and standards related to Service Account Governance with supporting industry leading information security reporting, risk scoring, and governance to ensure adherence to requirements.
- Manages internal and external stakeholder relationships including Line of Business, CIO delegates, Core Technology Infrastructure, Cyber Security Technology, Third Party management, Global Compliance and Operations Risk (CGOR), internal audit, and regulatory agencies.
- Analyzes existing Information Technology systems and processes to identify areas of vulnerability, provide mitigation tactics, and design / implement improved systems and processes to ensure Information Technology systems meet enterprise standards, adhere to applicable rules, laws, and regulations, and comply with appropriate treatment of risk.
- Proficient in articulating facts from data-driven plans to partners and stakeholders ensuring adoption of intended solutions to drive risk reductions and adherence that support relevant Identity and Authentication requirements.
- Create a backlog of tactical / strategic Service Account Governance initiatives that will reduce risk and increase adoptability.
Through risk ranking, and agreement on priorities, drive initiatives to completion.
- Through recurring engagements, clearly articulate rationale, and methods behind proposed changes through informative materials that can educate from end-user to CIOs.
- Engage senior management to provide factual, transparent, and timely reporting on existing and emerging Service Account risks.
Required Qualifications :
- 10+ years of hands-on IAM experience in a large and complex organization with a deep understanding of IAM concepts, relevant knowledge of IAM business, and strong technical expertise.
- Experience with the following : BeyondTrust, CyberArk, Thycotic, Centrify, Hashicorp, or other Service Account lifecycle management solutions would be an advantage.
- Knowledge and understanding of Identity and Access Management specific laws, rules, regulations, and Guidelines such as SOX, OCC, NIST, ISO / EC, FFIEC within the financial services sector would be an advantage.
- Possession of CISSP certification would be an advantage.
- Knowledge of identity and authentication methodologies, techniques, and technologies.
- Security knowledge which covers core technology infrastructure (Account management, servers, databases, etc.) identity management and application security practice.
Desired Qualifications :
- Experience with Linux, Windows, Cloud Identity, Access Management, design and architecture of authentication services or Identity Store.
- Active Directory, LDAP, Azure AD experience, Mainframe, Mid-range
- Experience with programming languages, for example as Java, Python, SQL, and PowerShell.
- Strong attention to detail and advanced analytical skills.
- Excellent communication and presentation skills.
- Excellent organizational skills and be able to effectively prioritize multiple tasks.
- Hands on experience and involvement in large and complex projects.
- Proficient in data management which includes strong data analytical capabilities with advanced understanding of the collection and management of metadata.
- This job will be open and accepting applications for a minimum of seven days from the date it was posted.
Shift :
1st shift (United States of America)
Hours Per Week :
Senior Analyst, Information Security & Risk
Cardinal Healths Information Security team is on a tremendous growth journey adding a number of new team members in our Cyber Threat Operations Center (CTOC) , IT Risk and Compliance, and Security Architecture teams. We promote a culture that protects information assets, manages risk and embeds secu...
Senior Information Security Architect (Mobile Security)
New or modified architectural designs referencing core security controls and requirements end to end. You will be the primary liaison with technology, security, compliance and Senior Technology Managers. Experience and hands on knowledge of Identity Access management security controls. Experience an...
Senior Information Security Officer
The Senior Information Security Officer will be a member of the Business Information Security Officer's (BISO) organization and work closely with the line of business Chief Information Officers (CIOs)/Chief Technology Officers (CTOs). Key responsibilities include leading in-depth information securit...
Information Security Vulnerability Analysis Senior Analyst
This job is responsible for assessing the bank's technologies, applications, and overall security controls to identify potential risks and vulnerabilities that may impact Bank of America's information security. Key responsibilities include understanding and complying of the Bank's Global Information...
Senior Information Security Engineer (U.S. Remote) Chicago, IL, United States Posted on 06/06/2[...]
The Senior Information Security Engineer will play a critical role in developing and implementing comprehensive information security strategies, policies, and procedures to safeguard our organization's digital assets. The Senior Information Security Engineer. This role requires a combination of tech...
Information Security Specialist
The Information Security Specialist will be responsible for protecting the company's information systems from cyber threats. About the job Information Security Specialist. Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field preferred. This includes...
Senior Engineer, Information Security (DFIR) - Remote
As the Senior Engineer, Information Security (DFIR), you'll be responsible for performing, facilitating, and documenting the complex analysis, development and testing of security methodologies and technologies. Familiarity with intrusion detection methodologies and techniques for detecting host and ...
Senior Network Security Infrastructure Specialist
As Senior Network Security Infrastructure Specialist your primary focus will be tomaintain the integrity of the deployed network security asset data, document how it is deployed, proactively evaluate how it is operating, and develop plans to optimizethe environment. Senior Network Security Infrastru...
(Global Oil Gas) Senior Cyber Security Specialist
Additionally, you'll provide technical leadership in the overall Cyber Defense by ensuring Security Design & Architecture, Security Operations, Incident Response, Forensics, Penetration Testing, Network, Systems and Application Security, Risk Management, Red Teaming, Emerging Threat Analysis and...
Senior Information Security Engineer - IntelliScript (Remote)
As a Senior Information Security Engineer on the Information Security team at Milliman IntelliScript, you’ll play a key role in helping us continuously improve our security programs to ensure the safety of our technology, processes and data. As a member of the Information Security team, you will col...