Bank Of America Privileged Access Management Security Analyst 

Ireland, Dublin 

625322156

Corporate Title: Vice President

Find us at our Central Park office, Leopardstown, where you will find our state-of-the-art facilities based in Dublin’s premium business park. With an onsite gym, staff restaurant and coffee shop, all your daily needs are conveniently catered for. There are also a range of travel options available to staff, including the LUAS network and the Central Park shuttle service between Dublin City Centre and Central Park, which means getting to work has never been so easy.

Role Description

This role reports directly to the Technology Executive for Authentication, Privilege Access Management Service and Cloud IAM. The purpose of this role is to ensure that relevant Privileged Access Controls are adequately enforced across platforms and applications to comply with IAM Standard.

Responsibilities:

• Collaborate with PAM Governance leads to measure, report and govern controls effectively

• Apply industry PAM best practices, templates, and documentation and propose improvements based on practical knowledge.

• Document and communicate PAM related requirements to technology partners for efficient, effective, and modern risk reduction.

• Collaborate with stakeholders to develop PAM requirements that iteratively support long term PAM modernization and transformation (covers Process, Data and Technology aspects).

• Provide education to team members and technology partners regarding the proposed changes to PAM controls.

• Partner with the policy governance team for socialization and publication of proposed changes to the PAM Standard

• Proactively identify risk and ways to continuously enhance and improve BAC’s PAM controls.

• Engage senior management for factual, transparent, and timely reporting on existing and emerging PAM or information security risks.

• Actively participate in GIS IAM/PAM forums including but not limited to Monthly IAM Stakeholder Forum and Control Owner Forum for standard and Single Process Inventory (SPI) enhancements.

• Support audit issues for closure and sustainability

What we are looking for:

• Good knowledge and understanding of PAM-specific laws, rules, and regulations within the financial services sector.

• Ability to interpret information security Policy, Standards, Procedure and Guides and apply them to related PAM decisions and response.

• Be a subject matter expert who can advise business and technology counterparts on achieving compliance.

• Familiarity with security standards such as NIST, ISO/EC, FFIEC.

• Have an expert level knowledge of privileged access management methodologies and techniques for on-prem and Cloud implementation as well as knowledge of PAM related tools.

• Hands-on experience in PAM in complex and heterogenous technology environment.

• Deep security knowledge which covers core technology infrastructure (network, storage, servers, databases, etc.) identity management and application security practice.

• Demonstrable experience with Linux, Windows, Cloud scale Identity, Access Management (Single Sign-On, Multi Factor Authentication), Authorization services or design and architecture of PAM services

• Expert level knowledge of authentication platforms such as Active Directory, LDAP, Kerberos, LDAP, Radius.

• Proficient in articulating facts and data-driven plans and to partner with stakeholders to implement intended solutions to drive risk reductions and adherence to PAM standards.

• Excellent communication and presentation skills. Able to effectively prioritize multiple tasks.

• Hands on experience and involvement in large and complex projects.

• Proven track record in delivering outcomes that result in sustainable risk reductions in PAM.

• Ability to work independently on initiatives with little oversight. Motivated and willing to learn.

• Confident and effective in delivering messages across a wide spectrum of individuals with varying degrees of technical and business understanding.

• Deep knowledge of bank financial practices and policies and ability to adapt to fast changing environment.

• Knowledge of Compliance Certifications such as SOX, SOC, SOC2.

Skills that will help

• Possession of CISSP certification would be an advantage.

Private healthcare for you and your family plus an annual health screen to help you manage your physical wellness with the option to purchase a screen for your partner.

20 days of back-up childcare including virtual tutoring and 20 days of adult-care per annum

Ability to change your core benefits as well as the option of selecting a variety of flexible benefits to suit your personal circumstances including access to a wellbeing account, travel insurance, specified illness cover etc.

Use of a flex fund to use towards benefits.

Access to free counselling through an Employee Assistance Programme and virtual GP services

We strive to ensure that our recruitment processes are accessible for all candidates and encourage any candidates to tell us about any adjustment requirements.